Exam 300-730 topic 1 question 57 discussion

Steap 13 (Optional). By default, all traffic from the client is sent through the tunnel. You can configure split tunnel, which allows only selected traffic to go through the tunnel. ip access-list standard split_tunnel permit 10.0.0.0 0.255.255.255 ! crypto ikev2 authorization policy ikev2-auth-policy route set access-list split_tunnel https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html#toc-hId-936641904

Answer should be A https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html

n a Cisco router, split tunneling for IKEv2 remote access clients is typically defined within the Group Policy configuration. The Group Policy defines various parameters and settings for a particular group of remote access clients. Within the Group Policy configuration, you can specify whether split tunneling should be enabled or disabled for the IKEv2 remote access clients associated with that group. Split tunneling determines how network traffic is routed when a remote access client is connected to the router using IKEv2. It allows the client to decide which traffic should be sent through the VPN tunnel and which traffic should be directly routed to the local network or the internet. While IKEv2 Authorization Policy can also play a role in defining access permissions and policies for IKEv2 remote access clients, split tunneling itself is typically configured within the Group Policy. So, the correct answer is that split tunneling for IKEv2 remote access clients on a Cisco router is defined within the Group Policy.

A is the Correct answer

Group policy makes sense here.

a big A

A is correct

Defined in IKEv2 auth policy

VPN-ROUTER(config)# ip access-list extended SPLIT_TUNNEL_ACL VPN-ROUTER(config-std-nacl)# permit 172.20.1.0 0.0.0.255 VPN-ROUTER(config-std-nacl)# VPN-ROUTER(config-std-nacl)# crypto ikev2 authorization policy EMPLOYEES VPN-ROUTER(config-ikev2-author-policy)# route set access-list SPLIT_TUNNEL_ACL

Im gonna go with group policy on this on. Steap 13 (Optional). By default, all traffic from the client will be sent through the tunnel. You can configure split tunnel, which allows only selected traffic to go through the tunnel. ip access-list standard split_tunnel permit 10.0.0.0 0.255.255.255 ! crypto ikev2 authorization policy ikev2-auth-policy route set access-list split_tunnel https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html

for IKEv2 A is correct like Lantis wrote if it where IKEv1 group policy would be right https://www.cisco.com/c/en/us/support/docs/routers/3600-series-multiservice-platforms/91193-rtr-ipsec-internet-connect.html

I'd say A - IKEv2 Authorization Policy Source (Step 13): https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html Webvpn is for SSL remote access VPN's and the question asks about an IKEv2 remote access

WebVPN context -> group-> svc->split D is correct