SSE-ENGINEER · Question #21
An engineer has configured a new Remote Networks connection using BGP for route advertisements. The IPSec tunnel has been established, but the BGP peer is not up. Which two elements must the…
The correct answer is A. Secret C. Peer AS Number. The BGP peer not coming up despite an established IPSec tunnel indicates a potential BGP configuration issue. Secret - If MD5 authentication is configured for BGP, both Prisma Access and the Customer Premises Equipment (CPE) must have the same secret (authentication key). A…
Question
An engineer has configured a new Remote Networks connection using BGP for route advertisements. The IPSec tunnel has been established, but the BGP peer is not up. Which two elements must the engineer validate to solve the issue? (Choose two.)
Options
- ASecret
- BMRAI Timers
- CPeer AS Number
- DAdvertise Default Route Checkbox
How the community answered
(28 responses)- A82% (23)
- B11% (3)
- D7% (2)
Explanation
The BGP peer not coming up despite an established IPSec tunnel indicates a potential BGP configuration issue. Secret - If MD5 authentication is configured for BGP, both Prisma Access and the Customer Premises Equipment (CPE) must have the same secret (authentication key). A mismatch will prevent BGP from establishing a session. Peer AS Number - The Autonomous System (AS) number of the BGP peer must match what is expected on both sides of the connection. If the AS number is incorrect, the BGP session will fail By verifying these elements, the engineer can troubleshoot and establish a successful BGP peering session over the IPSec tunnel.
Topics
Community Discussion
No community discussion yet for this question.