An administrator is configuring a site-to-site IPSec VPN and assigns an IP address to the tunnel interface. Which two abilities are enabled by this specific configuration step? (Choose two.)

The correct answer is A. Configuring tunnel monitoring to verify the liveliness of the connection. C. Running a dynamic routing protocol like OSPF over the tunnel. Assigning an IP address to the tunnel interface allows the firewall to perform tunnel monitoring by sourcing and receiving keepalive traffic over the tunnel, and enables the use of dynamic routing protocols such as OSPF across the tunnel because the tunnel interface becomes a…

Implement Site-to-Site VPNs

Question

Options

AConfiguring tunnel monitoring to verify the liveliness of the connection.
BFirewall performing NAT traversal.
CRunning a dynamic routing protocol like OSPF over the tunnel.
DFirewall encrypting and decrypting packet payloads.

How the community answered

(48 responses)

A
83% (40)
B
4% (2)
D
13% (6)

Explanation

Assigning an IP address to the tunnel interface allows the firewall to perform tunnel monitoring by sourcing and receiving keepalive traffic over the tunnel, and enables the use of dynamic routing protocols such as OSPF across the tunnel because the tunnel interface becomes a routable Layer 3 interface.

Topics

#IPSec VPN#Tunnel Interface#Dynamic Routing#VPN Monitoring

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice