While troubleshooting, an engineer finds that the show crypto isakmp sa command indicates that the last state of the tunnel is MM_KEY_EXCH. What is the next step that should be taken to resolve this issue?
A.
Verify that the ISAKMP proposals match.
B.
Ensure that UDP 500 is not being blocked between the devices.
C.
Correct the peer's IP address on the crypto map.
D.
Confirm that the pre-shared keys match on both devices.
show crypto isakmp sa
This command shows the ISAKMP SA built between peers.
dst src state conn-id slot
10.1.0.2 10.1.0.1 QM_IDLE 1 0
In theshow crypto isakmp sa output, the state must always be QM_IDLE. If the state is MM_KEY_EXCH, it means either the configured pre-shared key is not correct or the peer IP addresses are different.
PIX(config)#show crypto isakmp sa
Total : 2
Embryonic : 1
dst src state pending created
192.168.254.250 10.177.243.187 MM_KEY_EXCH 0 0
You can rectify this when you configure the correct IP address or pre-shared key.
MM_KEY_EXCH* – Both peers exchange their DH keys and are generating their secret keys. (This state could also mean there is a mis-matched authentication type or PSK, if it does not proceed to the next step)
as Kyle1776 said that MM_Key_Exch message would means either psk or peer wrong, but as the output of the show crypto isakmp sa would show you the local and remote peer IP, so the next step would be checking the peer IP is correct, so the answer is C
Well according to Cisco its both C and D the pre-shared key is wrong of the peer is wrong would result in the MM_Key_Exch message
In the show crypto isakmp sa output, the state should always be QM_IDLE. If the state is MM_KEY_EXCH, it means either the configured pre-shared key is not correct or the peer IP addresses are different.
https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/5409-ipsec-debug-00.html
This section is not available anymore. Please use the main Exam Page.300-730 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
ed81044
7 months, 2 weeks agokylesam2017
10 months, 3 weeks agomihaid
1 year, 2 months agoKhs01
1 year, 3 months agompls_link
1 year, 7 months agoNet4dd
1 year, 8 months agomazinhoo
2 years, 3 months agoAF_Nick
2 years, 3 months agoKyle1776
2 years, 5 months agoe_mwas
2 years, 7 months ago