Configuring VPN Sessions and Tunnel Groups | Implementing Secure Solutions with Virtual Private Networks

Mapping VPN Sessions to Tunnel Groups | 300-730-SVPN Exam | Cisco Certification

Question

Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E.

BD.

The parameters that help to map a VPN session to a tunnel group without using the tunnel-group list are as follows:

A. Group-alias: Group-alias is a feature that enables a client to connect to a VPN group by specifying an alias name rather than the group name. This parameter can be used to map a VPN session to a tunnel group. When a client initiates a connection, the security appliance uses the alias name specified by the client to identify the appropriate tunnel group. Group-alias can be used in conjunction with tunnel-group names or instead of them.

D. Group-URL: Group-URL is a feature that enables a client to connect to a VPN group by specifying a URL. This URL can be used to map a VPN session to a tunnel group. When a client initiates a connection, the security appliance uses the URL specified by the client to identify the appropriate tunnel group. Group-URL can be used in conjunction with tunnel-group names or instead of them.

B. Certificate Map: Certificate Map is a feature that enables a VPN to be established based on the characteristics of the client's certificate. This parameter can be used to map a VPN session to a tunnel group. When a client initiates a connection, the security appliance uses the characteristics of the client's certificate to identify the appropriate tunnel group.

C. Optimal Gateway Selection: Optimal Gateway Selection is a feature that enables a client to connect to the best available VPN gateway based on criteria such as load, latency, and location. This parameter does not map a VPN session to a tunnel group.

E. AnyConnect client version: AnyConnect client version is not a parameter that helps to map a VPN session to a tunnel group without using the tunnel-group list.