[A] establishes an IPsec tunnel with [B]. The NAT device translates the IP address 1.1.1.1 to 2.1.1.1.On which port is the IKE SA established?
A.
TCP 500
B.
UDP 500
C.
TCP 4500
D.
UDP 4500
which port is the IKE SA established?
Click the Exhibit button.
[A] establishes an IPsec tunnel with [B]. The NAT device translates the IP address 1.1.1.1 to 2.1.1.1.On which port is the IKE SA established?
Is the answer really D?
I thought the answer would be B, UDP500
It’s same for me….
Please take a look here page 10
http://kb.juniper.net/library/CUSTOMERSERVICE/technotes/3500176-EN.PDF
With source NAT right port used for IKE is 4500 or more not 500 UDP
The reason cipi1986 is correct is because he assumes that the question is using nat-traversal. The reason he assumes this is because traffic is being nat-ed, and if nat-traversal was not being used, then this vpn would not work. D is the right answer because nat traversal encapsulates esp packets into udp packets, and uses port 4500 when sending traffic.
I think the right answer is C, the Ike 500 udp encapsulate over 4500 tcp
hi
D is the correct answer
This will explain it further .
http://www.juniper.net/techpubs/en_US/junose14.3/information-products/topic-collections/swconfig-ip-services/index.html?topic-75714.html