Refer to the exhibit. An engineer is diagnosing an issue that occurred after a router at a branch site was assigned a new address. Based on the debugs, what must be done to resolve this issue?
A.
Add the remote peer’s IP address to the server's IKEv2 keyring.
B.
Ensure that the correct preshared keys are set on both sides.
C.
Ensure that the UDP 500 packets between devices are not dropped.
D.
Add the remote peer’s identity to the server’s IKEv2 profile.
The head-end tried to look up a preshared key for the identity 192.168.20.25 and could not find one, so the IKE AUTH exchange fails and the SA is deleted.
That happens when the branch router’s outside IP has changed but the new address has not yet been added to the keyring that stores preshared keys.
*Feb 21 16:09:52.295: IKEv2-ERROR:(SESSION ID = 1,SA ID = 1):: Failed to locate an item in the database
*Feb 21 16:09:52.296: IKEv2:(SESSION ID = 1,SA ID = 1):Verification of peer's authentication data FAILED
This section is not available anymore. Please use the main Exam Page.300-730 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
r3spu
1 month, 1 week agoRosh8787
1 year, 1 month agomjuarez20
1 year, 2 months agogondohwe
1 year, 3 months agoNet4dd
1 year, 11 months agoNet4dd
1 year, 11 months agomazinhoo
2 years ago