Several offices are connected with VPNs using static IPv4 routes. An administrator has been tasked with implementing OSPF to replace static routing. Which step is required to accomplish this goal?

Question

Options

• AEnable OSPFv3 on each tunnel interface and use Area ID 0.0.0.0
• BCreate new VPN zones at each site to terminate each VPN connection.
• CAssign an IP address on each tunnel interface at each site.
• DAssign OSPF Area 0.0.0.0 to all Ethernet and tunnel interfaces.

• A
  6% (1)
• B
  6% (1)
• D
  88% (14)

Explanation

To replace static routing with OSPF across IPsec VPN tunnels on Palo Alto Networks firewalls, the critical step is assigning OSPF Area 0.0.0.0 (the backbone area) to both the physical/Ethernet LAN interfaces and the tunnel interfaces at each site. This enables OSPF neighbor relationships to form over the tunnels so that routes are exchanged dynamically. Option C (assigning IPs to tunnel interfaces) is a prerequisite for route-based VPNs in general, but the OSPF-specific configuration step is the area assignment in option D. Option A incorrectly references OSPFv3 (the IPv6 protocol). Option B is unnecessary-existing VPN zones can be reused.

No community discussion yet for this question.