Notifications
Clear all
Topic starter
by the security gateway device displa ipsec sa command displays the following order information, the information is understood by ______ .
===============================
Interface: Serial0/2/1
path MTU: 1500
=========================== ====
-----------------------------
IPsec polic name: "1"
sequence number: 1
mode: isakmp
-----------------------------
connection id: 5
encapsulation mode: transport
perfect forward secrec: None
tunnel:
local address: 10.2.1.1
remote address: 10.2.1.2
Flow:
sour addr: 10.1.1.0/255.255.255.0 port: 0 protocol: IP
dest addr: 10.3.1.0/255.255.255.0 port: 0 protocol: IP
[inbound ESP SAs]
spi: 909448761 ( 0x36351639 )
proposal: ESP-ENCRPT-DES ESP-AUTH-MD5
sa remaining ke duration ( btes/sec ) : 1887435204/83
max received sequence-number: 19
udp encapsulation used for nat traversal: N
[outbound ESP SAs]
spi: 1583842120 ( 0x5e678348 )
proposal: ESP-ENCRPT-DES ESP- AUTH-MD5
sa remaining ke duration ( btes/sec ) : 1887435204/83
max sent sequence-number: 20
udp encapsulation used for nat traversal: N
- A . This security policy works in tunnel mode
B. This security policy does not enable the NAT traversal function of IPSec/IKE
C. This security policy uses the ESP+AH encapsulation protocol
D. This security policy IKE dynamic state of a negotiated key , the SPI , security protocols and algorithm parameters
Suggested Answer: BD
Posted : 17/02/2023 8:52 am