nerdexam
Juniper

JN0-696 · Question #13

JN0-696 Question #13: Real Exam Question with Answer & Explanation

Sign in or unlock JN0-696 to reveal the answer and full explanation for question #13. The question stem and answer options stay visible for context.

Question

[edit] user@SRX-1# show security ike traceoptions file ike-trace; flag all; [edit] user@SRX-1# show security ipsec traceoptions flag all; user@SRX-1> show log ike-trace ... Jun 13 17:00:33 :500 (Responder) -> 192.168.1.11:500 { 15276b72 6656c3b6 - 4ea713e7 d2487276 [1] / 0x9828a32e } QM; Invalid protocol_id = 0 Jun 13 17:00:34 Received authenticated notification payload unknown from local:192.168.1.10 remote:192.168.1.11 IKEv1 for P1 SA 3075335 Jun 13 17:00:34 iked_pm_ike_spd_notify_receiveD. Negotiation is already failed. Reason: TS unacceptable. Jun 13 17:00:34 QM notification `(null)' (40001) (size 8 bytes) from 192.168.1.11 for protocol Reserved spi[0...3]=0f f0 ce d3 Jun 13 17:00:34 ike_st_i_private: Start Jun 13 17:00:34 ike_st_o_qm_hash_2: Start Jun 13 17:00:34 ike_st_o_qm_sa_values: Start Jun 13 17:00:34 :500 (Responder) -> 192.168.1.11:500 { 15276b72 6656c3b6 - 4ea713e7 d2487276 [1] / 0x9828a32e } QM; Error = No proposal chosen (14) Jun 13 17:00:34 ike_alloc_negotiation: Start, SA = { 15276b72 6656c3b6 - 4ea713e7 d2487276} Jun 13 17:00:34 ike_encode_packet: Start, SA = { 0x15276b72 6656c3b6 - 4ea713e7 d2487276 } / 65407839, nego = 2 Jun 13 17:00:34 ike_send_packet: Start, send SA = { 15276b72 6656c3b6 - 4ea713e7 d2487276}, nego = 2, dst = 192.168.1.11:500, routing table id = 0 Jun 13 17:00:34 ike_delete_negotiation: Start, SA = { 15276b72 6656c3b6 - 4ea713e7 d2487276}, nego = 2 Jun 13 17:00:34 ike_free_negotiation_info: Start, nego = 2 Jun 13 17:00:34 ike_free_negotiation: Start, nego = 2 Jun 13 17:00:34 IPSec negotiation failed for SA-CFG Unknown for local:192.168.1.10, remote:192.168.1.11 IKEv1. status: TS unacceptable Jun 13 17:00:34 P2 ed info: flags 0x0, P2 error: TS unacceptable Jun 13 17:00:34 iked_pm_ipsec_sa_done: Phase2 failed 2/3 times for P1 SA 3075335 The IPsec tunnel is not establishing between SRX-1 and a remote device. Referring to the exhibit, what is causing this problem?

Options

  • AIKE Phase 1 IKE ID mismatch
  • BIKE Phase 1 proposals mismatch
  • CIKE Phase 2 proxy ID mismatch
  • DIKE Phase 2 proposals mismatch

Unlock JN0-696 to see the answer

You've previewed enough free JN0-696 questions. Unlock JN0-696 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full JN0-696 Practice