Exam 300-730 topic 1 question 119 discussion

Actual exam question from Cisco's 300-730

Question #: 119
Topic #: 1

A network engineer is configuring a server. The router will terminate encrypted VPN connections on g0/0, which is in the VRF "Internet". The clear-text traffic that must be encrypted before being sent out traverses g0/1, which is in the VRF "Internal". Which two VRF-specific configurations allow VPN traffic to traverse the VRF-aware interfaces? (Choose two.)

A. Under the IKEv2 profile, add the ivrf Internal command.
B. Under the virtual-template interface, add the ip vrf forwarding Internet command.
C. Under the IKEv2 profile, add the match fvrf Internal command.
D. Under the IKEv2 profile, add the match fvrf Internet command.
E. Under the virtual-template interface, add the tunnel vrf Internet command.

Show Suggested Answer

Suggested Answer: DE 🗳️

by red_sparrow_Gr at Jan. 31, 2023, 7:05 p.m.

Comments

Submit Cancel

Net4dd

Highly Voted 1 year, 11 months ago

Selected Answer: DE

D and E are correct: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/116000-flexvpn-config-00.html

upvoted 5 times

pfrank

1 year ago

Yup. That's right

upvoted 1 times

...

kylesam2017

Most Recent 1 year, 1 month ago

"D and E", are the correct answer selections here. Where the router is terminating encrypted VPN connections on g0/0 in the "Internet" VRF, and clear-text traffic is traversing g0/1 in the "Internal" VRF, the correct VRF-specific configurations to allow VPN traffic to traverse VRF-aware interfaces are: Under the virtual-template interface, add the tunnel vrf Internet command. Under the IKEv2 profile, add the match fvrf Internet command. So, the correct combination is: 1) Under the virtual-template interface, add the tunnel vrf Internet command. 2) Under the IKEv2 profile, add the match fvrf Internet command. This ensures that VPN traffic from the "Internal" VRF, encapsulated by the virtual-template interface, correctly traverses the "Internet" VRF on the g0/0 interface, meeting the requirements of the described scenario.

upvoted 4 times

...

Rosh8787

1 year, 1 month ago

DE is the correct answer

upvoted 1 times

...

gondohwe

1 year, 2 months ago

this exam source is a sucker wrong answer again showing so readers could fail

upvoted 2 times

...

red_sparrow_Gr

2 years ago

Selected Answer: DE

I think it should be D & E crypto ikev2 profile CProfile match fvrf internet // ("out vrf") ... virtual-template 1 ... interface virtual-template 1 type tunnel vrf forwarding internal // (internal vrf) ... tunnel vrf internet // (out vrf)

upvoted 2 times

starletka

1 year ago

You mean C and E than yeah? Internal vs Internet :D

upvoted 1 times

starletka

1 year ago

my bad ... reread the question :D

upvoted 1 times

...