A network designer has provisioned a router to use IPsec to encrypt the traffic over a GRE tunnel going to a web server at a remote location.
From the router, the network designer can ping the web server, although the users in the office comment that they are unable to reach it.
(Note: The DF bit is not set.) Which aspect should be changed in the design of the virtual connection?
Click on the arrows to vote for the correct answer
A. B. C. D.C.
The issue is that the users in the office are unable to reach the web server at the remote location, despite the router being able to ping it. This suggests that there is a problem with the virtual connection that has been established between the two locations.
In this scenario, the router has been provisioned to use IPsec to encrypt the traffic over a GRE tunnel. GRE (Generic Routing Encapsulation) is a protocol that can encapsulate various types of network layer protocols inside virtual point-to-point links. In this case, the GRE tunnel is being used to connect the local office network to the remote web server.
One possible cause of the problem could be a mismatch in the MTU size on the GRE tunnel. MTU (Maximum Transmission Unit) is the maximum size of a packet that can be transmitted over a network. If the MTU size on the GRE tunnel is set too high, then packets may be dropped or fragmented, leading to connectivity issues.
Therefore, the correct answer could be option C, to change the MTU size on the GRE tunnel. The network designer should check the MTU size on the GRE tunnel and ensure that it is set to an appropriate value that allows for the IPsec encryption and the encapsulation of the traffic without causing any fragmentation or packet loss.
Option A, changing the IP addresses of the GRE tunnel endpoints, would not resolve the issue as the router is able to ping the web server. This suggests that the IP addresses are correctly configured.
Option B, changing the IPsec configuration, is also unlikely to resolve the issue as the router is able to ping the web server. This suggests that the IPsec encryption is working correctly.
Option D, changing the encapsulation of the GRE tunnel, is also unlikely to resolve the issue as the GRE tunnel is already being used to encapsulate the traffic between the two locations. Changing the encapsulation would require a different protocol, which may not be compatible with the existing setup.