Refer to the Exhibit.
— Exhibit –
— Exhibit —
Host traffic is traversing through an IPsec tunnel. Users are complaining of intermittent issues with
their connection.
Referring to the exhibit, what is the problem?
A.
The tunnel is down due to a configuration change.
B.
The do-not-fragment bit is copied to the tunnel header.
C.
The MSS option on the SYN packet is set to 1300.
D.
The TCP SYN check option is disabled for tunnel traffic.
Explanation:
Yes, answer is “A”, two gateways in the same subnet is a tunnel misconfiguration; DF-Bit copy is actually a recommended set up so that ICMP messages type 3 & 4 can be transmitted back to sender when MTU is exceeded.
Answer is B,
http://kb.juniper.net/KB25625
Josh, having the gateways within the same subnet is totally fine. If you have ever done a lab within a private range, this is a normal thing to do.
Josh I hate you 🙂
Josh ,
Go to hell