Refer to the exhibit. A network engineer is troubleshooting a new DMVPN configuration. The network connectivity between the hub and spoke is working as it should, but users cannot access VPN resources. Which action resolves the issue?
A.
Review ISAKMP packets on devices between the VPN devices.
B.
Unblock IP protocol 50 on devices between the VPN devices.
C.
Ensure that the IPsec profile is configured on the tunnel interface.
D.
Ensure that the NHS is configured on the tunnel interface.
Answer is A.
The IKE SAs are stuck in MM_NO_STATE, which means the very first Main-Mode packet leaves but never receives a valid reply. That almost always points to UDP/500 (or 4500) being filtered somewhere between the hub and spoke, not to an NHRP or IPsec-profile problem.
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.300-730 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
r3spu
4 weeks ago