Exam 400-101 topic 1 question 370 discussion

Actual exam question from Cisco's 400-101

Question #: 370
Topic #: 1

You are configuring a DMVPN spoke to use IPsec over a physical interface that is located within a VRF. For which three configuration sections must you specify the VRF name? (Choose three.)

A. the ISAKMP profile
B. the crypto keyring
C. the IPsec profile
D. the IPsec transform set
E. the tunnel interface
F. the physical interface

Show Suggested Answer

Suggested Answer: BEF 🗳️
ip vrf forwardingvrf-name
Example:
Router(config-if)# ip vrf forwarding green
Associates a virtual private network (VPN) routing and forwarding (VRF) instance with an interface or subinterface.

vrf-name is the name assigned to a VRF.
Router(config-if)# tunnel vrfvrf-name
Example:
Router(config-if)# tunnel vrf finance1
Associates a VPN routing and forwarding (VRF) instance with a specific tunnel destination. vrf-name is the name assigned to a VRF.
Router(config)# crypto keyringkeyring-name [vrf fvrf-name]
Defines a crypto keyring to be used during IKE authentication and enters keyring configuration

mode.

keyring-name--Name of the crypto keyring.

fvrf-name--(Optional) Front door virtual routing and forwarding (FVRF) name to which the keyring will be referenced. fvrf-name must match the FVRF name that was defined during virtual routing and forwarding (VRF) configuration
"Pass Any Exam. Any Time." - www.actualtests.com 359

by [deleted] at April 3, 2025, 6:33 p.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!