Refer to the exhibit. A customer cannot establish an IKEv2 site-to-site VPN tunnel between two Cisco ASA devices. Based on the syslog message, which action brings up the VPN tunnel?
A.
Reduce the maximum SA limit on the local Cisco ASA.
B.
Increase the maximum in-negotiation SA limit on the local Cisco ASA.
C.
Remove the maximum SA limit on the remote Cisco ASA.
D.
Correct the crypto access list on both Cisco ASA devices.
B.
"Increase the call admission control (CAC) limit for IKEv2 on the ASA. The CAC limit defines how many SAs can be in negotiation state at the same time. You can use the crypto call admission limit ikev2 command to set the CAC limit. The default value is 50 and the maximum value is 5000. For example:
crypto call admission limit ikev2 100"
B. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ikevpn/configuration/xe-3s/sec-ike-for-ipsec-vpns-xe-3s-book/sec-call-addmsn-ike.html
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.300-730 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
san111
10 months agoNet4dd
1 year, 2 months ago