156-585 Exam Dumps | Vanessa is reviewing ike.elg file to troubleshoot failed site-to-site VPN connection After sending Mam

<< Prev Question Next Question >>

Question 37/48

Vanessa is reviewing ike.elg file to troubleshoot failed site-to-site VPN connection After sending Mam Mode Packet 5 the response from the peer is PAYLOAD-MALFORMED" What is the reason for failed VPN connection?

A. The authentication on Phase 1 is causing the problem.
Pre-shared key on local gateway encrypted by the hash algorithm created in Packet 3 and Packet 4 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key

B. The authentication on Phase 1 is causing the problem
Pre-shared key on local gateway encrypted by the hash algorithm doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key created in Packet 1 and Packet 2

C. The authentication on Phase 2 is causing the problem
Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 1 and 2 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key

D. The authentication on Quick Mode is causing the problem
Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 3 and 4 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key

Recent Comments (The most recent comments are at the top.)

Mykola - Mar 17, 2023

PHASE 1 (MAIN MODE)
1 > Pre-shared Secrets, Encryption & hash Algorithms, Auth method, initiator cookie (clear text)
2 < Agree on one encryption & hash, responder cookie (clear text)
3 > Random numbers sent to prove identity (if it fails here, reinstall)
4 < Random numbers sent to prove identity (if it fails here, reinstall)
5 > Authentication between peers, peers ip address, certificates exchange, shared secrets, expired certs, time offsets
6 < Peer has agreed to the proposal and has authenticated initiator, expired certs, time offsets

PHASE 2 (QUICK MODE)
1 > Use a subnet or a host ID, Encryption, hash, ID data
2 < Agrees with its own subnet or host ID and encryption and hash
3 > Completes IKE negotiation

Question 37/48

Recent Comments (The most recent comments are at the top.)

LEAVE A REPLY

Download PDF File