Question 418 of 530 from exam 400-251: CCIE Security written exam

Question 418 of 530 from exam 400-251: CCIE Security written exam

Prev Question Next Question

Question

Refer to the exhibit.

Client:
interface Virtual-Templatel type tunnel
ip unnumbered Gigabi tEthernet0/1
tunnel mode ipsec ipv4

crypto ipsec client eavpn client
connect auto

group vpngroup key cisco

node client

peer 101.1-1.2

vircual-interface 1

username ccie password ccie

xauth userid mode local

interface Loopback®
ip address 10.10.10.1 255.255.255.0

crypto ipsec client ezvpn ezvpnclient inside

interface GigabitEthernet0/1
ip address 101.1.1.1 255.255.255.0
crypto ipsec client ezvpn client

Server:
username ccie password 0 ccie
interface Loopbackd

ip address 20.20.20.1 255.255.255.0

ip local pool client 169.10.10.10 169.10.10.20

access-list 101 permit ip host 20.20.20.1 any
czypto isakmp policy 1

encr dee

authentication pre-share

group 2

crypto isakmp client configuration group
vpngroup

key Cisco

pool client

acl 101

save-password

crypto ipsec traneform-set ts esp-3des esp-sha-
mac

interface Virtual-Templatel type tunnel
ip unnumbered Gigabi tEthernet0/1
tunnel mode ipsec ipv4

tunnel protection ipsec profile ipsecpré

crypto isakmp profile isakmpprofile
match identity group vpngroup

client authentication list authen
isalmp authorization list author
client configuration address respond
virtual-template 1

interface GigabitEthernet0/1
ip address 101.1.1.2 255.255.255.0

Why is there no encrypted session between host 10.10.10.1 and 20.20.20.1?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E.

E.