Refer to the exhibit. You have configured R1 and R2 as shown, but the routers are unable to
establish a site-to-site VPN tunnel. What action can you take to correct the problem?
A.
Edit the crypto keys on R1 and R2 to match.
B.
Edit the crypto isakmp key command on each router with the address value of its own interface
C.
Edit the ISAKMP policy sequence numbers on R1 and R2 to match.
D.
set a valid value for the crypto key lifetime on each router.
Explanation:
The crypto keys don’t match here. I’ve inferred and assumed that the destination address at
the end of the “Crypto isakmp key test12345 address 10.30.30.5” line is the IP address of R1.
By extension, this would produce an MM_NO_STATE state if you ran the “show crypto
isakmp sa” command, as it would never connect to begin phase 1.