You have recently configured an IPsec tunnel between two SRX Series devices. One of the devices is assigned an IP address using DHCP with an IP address that changes frequently. Initial testing indicates that the IPsec tunnel is not working. Troubleshooting has revealed that Phase 1 negotiations are failing.
Which two actions would solve the problem? (Choose two.)
A. Verify that the device with the IP address assigned by DHCP is the traffic initiator.
B. Verify that VPN monitoring is enabled.
C. Verify that the IKE policy is configured for aggressive mode.
D. Verify that PKI is properly configured.
|
Download Printable PDF. VALID exam to help you PASS. |
 |
in “set security ipsec” configuration if configured with “establish-tunnel immediately ” it will try to be vpn initiator .