Encryption - Implement and troubleshoot IPSec with pre-­‐shared key - Virtual tunneling Interface (VTI)

4 important questions on Encryption - Implement and troubleshoot IPSec with pre-­‐shared key - Virtual tunneling Interface (VTI)

What is the advantage of VTI? 3

-Replaces crypto map
-Simplifies configuration
-Does not requiere a static mapping of ipsec session to physical interface

What is the command to configure a tunnel with a ipsec profile?

(config-if)#tunnel mode ipsec ipv4
(config-if)#tunnel protection ipsec profile vpnprofile (configure on tunnel)

(config)# crypto ipsec profile vpnprofile
set transform-set transformset
set isakmp-profile isakmpprofile

What are the advantages for VTI? 3

-support multicast
-scalable
-simplify configuration (automatically creates crypto maps for each tunnel)
  • Higher grades + faster learning
  • Never study anything twice
  • 100% sure, 100% understanding
Discover Study Smart

What are the command to configure dynamic VTI on the HUB?


????????

(config)interface virtual-template
(config-if)ip unnumbered fa0/0 (mandatory configuration)
(config-if)tunnel mode ipsec ipv4
(config-if)tunnel protection ipsec profile vpnprofile

CBT 31 - VTI Site to Site IPsec VPNs 13:37

The question on the page originate from the summary of the following study material:

  • A unique study and practice tool
  • Never study anything twice again
  • Get the grades you hope for
  • 100% sure, 100% understanding
Remember faster, study better. Scientifically proven.
Trustpilot Logo