PCNSE · Question #260
A customer wants to set up a site-to-site VPN using tunnel interfaces? Which two formats are correct for naming tunnel interfaces? (Choose two.)
The correct answer is A. tunnel.1 C. tunnel.1025. Palo Alto Networks tunnel interfaces for site-to-site VPNs require a specific naming convention that includes the 'tunnel' prefix followed by a valid numerical identifier.
Question
A customer wants to set up a site-to-site VPN using tunnel interfaces? Which two formats are correct for naming tunnel interfaces? (Choose two.)
Exhibit
Options
- Atunnel.1
- Bvpn-tunnel.1
- Ctunnel.1025
- Dvpn-tunnel.1024
How the community answered
(34 responses)- A88% (30)
- B3% (1)
- D9% (3)
Why each option
Palo Alto Networks tunnel interfaces for site-to-site VPNs require a specific naming convention that includes the 'tunnel' prefix followed by a valid numerical identifier.
The format 'tunnel.1' is a correct naming convention for a tunnel interface, as it uses the mandatory 'tunnel.' prefix followed by a valid numerical ID within the accepted range.
'vpn-tunnel.1' is incorrect because the required prefix for Palo Alto Networks tunnel interfaces is 'tunnel.', not 'vpn-tunnel.'.
The format 'tunnel.1025' is also a correct naming convention, adhering to the 'tunnel.' prefix and using a valid numerical ID within the standard range of 1 to 16383 for tunnel interfaces.
'vpn-tunnel.1024' is incorrect as it uses the invalid prefix 'vpn-tunnel.' instead of 'tunnel.' for a tunnel interface.
Concept tested: Palo Alto Networks tunnel interface naming convention
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/vpns/set-up-an-ipsec-vpn/set-up-an-ipsec-vpn-tunnel
Topics
Community Discussion
No community discussion yet for this question.