What can you do to reduce the failover time?

Click the Exhibit button

The exhibit shows a configuration for two IPSec tunnels. The tunnel ipsec-vpn-primary is being used as the primary tunnel, and the tunnel ipsec-vpn-backup is being used as the backup tunnel. The remote device is not a Juniper Networks device. When a link failure occurs in the path that supports the primary tunnel, traffic is black holed for many minutes before the backup tunnel is used.

What can you do to reduce the failover time?

The exhibit shows a configuration for two IPSec tunnels. The tunnel ipsec-vpn-primary is being used as the primary tunnel, and the tunnel ipsec-vpn-backup is being used as the backup tunnel. The remote device is not a Juniper Networks device. When a link failure occurs in the path that supports the primary tunnel, traffic is black holed for many minutes before the backup tunnel is used.

What can you do to reduce the failover time?

A.
Configure BFD over the IPSec tunnel.

B.
Configure VPN monitoring on the primary tunnel.

C.
Configure DPD on the primary tunnel.

D.
Configure DPD on the backup tunnel



Leave a Reply 1

Your email address will not be published. Required fields are marked *


HA

HA

C seems correct as “The remote device is not a Juniper Networks device”