What needs to be configured during phase 2 of a route-basedVPN, thatdoes not have to be configured during a policy-based VPN?

What needs to be configured during phase 2 of a route-basedVPN, thatdoes not have to be configured during a policy-based VPN? (assumeboth devices areNetScreensusing route-basedVPNs)

What needs to be configured during phase 2 of a route-basedVPN, thatdoes not have to be configured during a policy-based VPN? (assumeboth devices areNetScreensusing route-basedVPNs)

A.
Proxy-id

B.
Tunnel-binding

C.
Transport mode

D.
Replay protection

E.
Custom proposals

Explanation:

Route-basedVPNs, like policy-basedVPNs, can also use either manual key orautokeyIKE, but are configured and function somewhat differently. Route-basedVPNsdo not make reference to a tunnel object, but rather the destination address of the traffic. When theNetScreen appliance performs a route lookup to see which interface it should use to send the traffic, it sees there is a route through a tunnel interface that is bound to a VPN tunnel and uses that interface to deliver the traffic.



Leave a Reply 1

Your email address will not be published. Required fields are marked *


mr_tienvu

mr_tienvu

Correct answer is B