Juniper
JN0-633 · Question #25
You are attempting to establish an IPsec VPN between two SRX devices. However, there is another device between the SRX devices that does not pass traffic that is using UDP port 4500. How would you…
The correct answer is B. Disable NAT-T. NAT-T also uses UDP port 4500 (by default) rather than the standard UDP. So disabling NAT-T will resolve this issue.
VPNs (IPsec, SSL)
Question
You are attempting to establish an IPsec VPN between two SRX devices. However, there is another device between the SRX devices that does not pass traffic that is using UDP port 4500. How would you resolve this problem?
Options
- AEnable NAT-T.
- BDisable NAT-T.
- CDisable PAT.
- DEnable PAT.
How the community answered
(36 responses)- A11% (4)
- B81% (29)
- C3% (1)
- D6% (2)
Explanation
NAT-T also uses UDP port 4500 (by default) rather than the standard UDP. So disabling NAT-T will resolve this issue.
Topics
#NAT-T#UDP 4500#IPsec traversal#IKE
Community Discussion
No community discussion yet for this question.