JN0-637 · Question #56
You have deployed a pair of SRX series devices in a multimode HA environment. You need to enable IPsec encryption on the interchassis link. Referring to theexhibit, which three steps are required to…
The correct answer is A. Install the Junos IKE package on both nodes. While I previously stated that IKE is usually C. Configure a VPN profile for the HA traffic and apply to both nodes. D. Enable HA link encryption in the IPsec profile on both nodes. included in the base Junos OS image, it's essential to ensure that the necessary IKE package is indeed installed and enabled on both SRX nodes to support ICL encryption. C. Configure a VPN profile for the HA traffic and apply it to both nodes. This dedicated VPN profile defines…
Question
You have deployed a pair of SRX series devices in a multimode HA environment. You need to enable IPsec encryption on the interchassis link. Referring to theexhibit, which three steps are required to enable ICL encryption? (Choose three.)
Exhibit
Options
- AInstall the Junos IKE package on both nodes. While I previously stated that IKE is usually
- BEnable OSPF for both interchassis link interfaces and tum on the dynamic-neighbors parameter.
- CConfigure a VPN profile for the HA traffic and apply to both nodes.
- DEnable HA link encryption in the IPsec profile on both nodes.
- EEnable HA link encryption in the IKE profile on both nodes,
How the community answered
(27 responses)- A48% (13)
- B19% (5)
- E33% (9)
Explanation
included in the base Junos OS image, it's essential to ensure that the necessary IKE package is indeed installed and enabled on both SRX nodes to support ICL encryption. C. Configure a VPN profile for the HA traffic and apply it to both nodes. This dedicated VPN profile defines the security parameters (encryption algorithms, authentication, etc.) specifically for the ICL traffic.
Topics
Community Discussion
No community discussion yet for this question.