Encryption - Implement and troubleshoot IPSec with pre-‐shared key - Virtual tunneling Interface (VTI)
4 important questions on Encryption - Implement and troubleshoot IPSec with pre-‐shared key - Virtual tunneling Interface (VTI)
What is the advantage of VTI? 3
-Simplifies configuration
-Does not requiere a static mapping of ipsec session to physical interface
What is the command to configure a tunnel with a ipsec profile?
(config-if)#tunnel protection ipsec profile vpnprofile (configure on tunnel)
(config)# crypto ipsec profile vpnprofile
set transform-set transformset
set isakmp-profile isakmpprofile
What are the advantages for VTI? 3
-scalable
-simplify configuration (automatically creates crypto maps for each tunnel)
- Higher grades + faster learning
- Never study anything twice
- 100% sure, 100% understanding
What are the command to configure dynamic VTI on the HUB?
????????
(config)interface virtual-template
(config-if)ip unnumbered fa0/0 (mandatory configuration)
(config-if)tunnel mode ipsec ipv4
(config-if)tunnel protection ipsec profile vpnprofile
CBT 31 - VTI Site to Site IPsec VPNs 13:37
The question on the page originate from the summary of the following study material:
- A unique study and practice tool
- Never study anything twice again
- Get the grades you hope for
- 100% sure, 100% understanding