NSE4_FGT-7.0 · Question #24
Which of the following are purposes of NAT traversal in IPsec? (Choose two.)
The correct answer is A. To delete intermediary NAT devices in the tunnel path. C. To encapsulation ESP packets in UDP packets using port 4500. IPsec NAT traversal (NAT-T) enables IPsec tunnels to function through Network Address Translation devices by encapsulating ESP packets in UDP.
Question
Which of the following are purposes of NAT traversal in IPsec? (Choose two.)
Options
- ATo delete intermediary NAT devices in the tunnel path.
- BTo dynamically change phase 1 negotiation mode aggressive mode.
- CTo encapsulation ESP packets in UDP packets using port 4500.
- DTo force a new DH exchange with each phase 2 rekey.
How the community answered
(30 responses)- A90% (27)
- B7% (2)
- D3% (1)
Why each option
IPsec NAT traversal (NAT-T) enables IPsec tunnels to function through Network Address Translation devices by encapsulating ESP packets in UDP.
NAT traversal effectively allows IPsec tunnels to be established and maintained across NAT devices by modifying how IPsec packets are transmitted, thus 'deleting' or neutralizing the disruptive effect of intermediary NAT devices on the IPsec tunnel's integrity and connectivity.
NAT traversal does not dynamically change the Phase 1 negotiation mode to aggressive mode; it is a mechanism for passing IPsec traffic through NAT devices.
NAT traversal (NAT-T) in IPsec encapsulates ESP (Encapsulating Security Payload) packets within UDP packets, typically using destination port 4500, to allow them to traverse NAT devices.
NAT traversal is unrelated to forcing a new Diffie-Hellman (DH) exchange with each Phase 2 rekey, which is a separate IPsec security parameter.
Concept tested: IPsec NAT Traversal (NAT-T) functionality
Source: https://www.cisco.com/c/en/us/support/docs/ip/ipsec/13926-ipsec-nat-t-faq.html
Topics
Community Discussion
No community discussion yet for this question.