Question 420 of 530 from exam 400-251: CCIE Security written exam

Question 420 of 530 from exam 400-251: CCIE Security written exam

Prev Question Next Question

Question

interface Virtual-Templatel type tunnel
ip unnumbered Gigabi tEthernet0/1

crypto ipsec client eavpn client
connect auto

group vpngroup key cisco

mode client

peer 101.1-1.2

virtual-interface 1

username ccie password ccie

xauth userid mode local

interface Loopbackd

ip address 10.10.10.1 255.255-255.0

crypto ipsec client ezvpn ezvpnclient inside
interface GigabitEthernet0/1

ip address 101.1.1.1 255.255.255.0

crypto ipsec client ezvpn client

Server!
username ccie password 0 ccie
interface Loopbackd

ip address 20.20.20.1 255-255-255

ip local pool client 169.10.10.10 169.10.10.20

access-list 101 permit ip host 20.20.20.1 any
crypto isakmp policy 1

encr dee

authentication pre-share

group 2

crypto isakmp client configuration group
vpngroup

key cisco

pool client

acl 101

save-password

crypto ipsec transform-set ts esp-3des esp-sha-
mac

crypto ipsec profile ipsecprofile

set traneform-set ta

interface Virtual-Templatel type tunnel

ip unnumbered Gigabi tethernet0/1

tunnel mode ipsec ipvd

tunnel protection ipsec profile ipsecprofile

crypto isakmp profile isakmpprofile
match identity group vpngroup
client authentication list authen
isalmp authorization list author
client configuration address respond
virtual-template 1

interface GigabitEthernet0/1
ip address 101.1.1.2 255.255.255.0

Why is there no encrypted session between host 10.10.10.1 and 20.20.20.1?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E. F.

E.