An engineer is troubleshooting a new DMVPN setup on a Cisco IOS router. After the show crypto isakmp sa command is issued, a response is returned of "MM_NO_STATE." Why does this failure occur?
A.
The ISAKMP policy priority values are invalid.
B.
ESP traffic is being dropped.
C.
The Phase 1 policy does not match on both devices.
D.
Tunnel protection is not applied to the DMVPN tunnel.
should be C
A show crypto isakmp sa command shows the ISAKMP SA to be inMM_NO_STATE. This also means that main mode has failed.
dst src state conn-id slot
10.1.1.2 10.1.1.1 MM_NO_STATE 1 0
Verify that the phase 1 policy is on both peers, and ensure that all the attributes match.
https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/5409-ipsec-debug-00.html#toc-hId--70669866
Answer options B & D are for phase 2, hence, they are ruled out.
Out of options A & C, answer seems to be C because phase 1 denotes main mode, which has no state as per the error message - 'MM_NO_STATE'.
Could also be a mismatch on both sides as stated in this troubleshooting guide. https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/5409-ipsec-debug-00.html
Though it is mentioned that its DMVPN so that could be why esp is being dropped but that should only be if protection is on.
upvoted 2 times
...
This section is not available anymore. Please use the main Exam Page.300-730 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
nospampls
2 months agojoegreen
10 months, 1 week agostarletka
1 year, 3 months agokylesam2017
1 year, 4 months agogondohwe
1 year, 6 months agomihaid
1 year, 8 months agojimmyjose
1 year, 1 month agoKhs01
1 year, 10 months agoAnonymous983475
1 year, 11 months agoNet4dd
2 years, 2 months agoDante8880
2 years, 5 months agoBackupz
2 years, 5 months agoLouisVuitton
2 years, 6 months agomazinhoo
2 years, 9 months agonospampls
3 years, 1 month agoCarlj007
3 years, 4 months agoshiznity2k
4 years, 2 months agoSlysloth
4 years, 4 months ago