請問這道題目的答案？(300-410)

junejune

爬文發現有好多不同的答案．．．不知道正確答案到底是？

0 x/ h' `# m9 f
2 O2 G. g/ v) k; a" x9 b2 mRefer to the exhibit. After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both spoke-to-spoke and
hub were not establishing. Which two actions resolve the issue? (Choose two.)
, G7 k/ |+ D2 `& E* d4 M+ P

                               
登录/注册后可看大图

8 r, s4 f* X  `+ dA. Change the mode from mode tunnel to mode transport on R3.
- r8 N7 p" w# }5 {2 PB. Remove the crypto isakmp key cisco address 10.1.1.1 on R2 and R3.
C. Configure the crypto isakmp key cisco address 192.1.1.1 on R2 and R3.
4 f% H8 r8 \% p2 M5 L* [D. Configure the crypto isakmp key cisco address 0.0.0.0 on R2 and R3.
, B3 Y4 e! M" {" ?, kE. Change the mode from mode transport to mode tunnel on R2.
: ?) B$ t6 c; F1 b) d& C8 d: C

/ U' p  x  X: N8 a0 A
) ^& K$ b  G8 Z8 M
补充内容 (2021-7-8 21:11):
啊啊貼錯圖了

补充内容 (2021-7-8 21:13):
% W' R) D- C6 n; O* mhttps://ibb.co/wy7MsRH
. x3 Y0 y+ ~: K3 N% ~% v
這個才對

Jamin_Zheng

B D ???

rensiang

是不是貼錯圖片了阿
$ E+ u6 X0 l/ R( d6 D: X" H
圖片上的設定跟答案完全沒關係

junejune

rensiang 发表于 2021-7-8 15:47
是不是貼錯圖片了阿

0 |$ b, |* V$ S2 d圖片上的設定跟答案完全沒關係

' t, z, [- d5 \" H8 g+ t我貼錯圖了 這張才對
( Y8 X; S8 X5 z+ F+ a
) m: h& c7 z* _: ahttps://ibb.co/wy7MsRH
7 J3 m! M' @3 H; \; F9 d
2 R, i( [* N; J% U

                               
登录/注册后可看大图

junejune

貼錯圖了ＱＱ
0 t' o) b( d, ^
. V0 f/ v1 ?2 o- ^; m& c8 u: Z" r

: |2 b- y1 x% B( `% O) j0 Z8 Q                               
登录/注册后可看大图

爬文發現有好多不同的答案．．．不知道正確答案到底是？
" C, p; i. v, q$ Q

Refer to the exhibit. After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both spoke-to-spoke and
6 i  v) c: ^$ n- ^4 @hub were not establishing. Which two actions resolve the issue? (Choose two.)



3 }% I$ I- R$ C8 A" P: P' f( {

Reni

我认为是AD
Crypto isakmp key KEY address x.x.x.x 地址应该填对端wan口地址，也可写全0匹配所有对等体。DMVPN会有Spoke之间直连，应该用全0匹配所有对等体
DMVPN底层传输使用GRE，GRE隧道封装过程产生了新的传输点（外网接口）与加密点重合，故应使用传输模式。如用隧道模式也能通信，但额外添加的IP包头没有任何意义，且被认为是错误的配置。
0 u6 p8 Y' ~4 j+ p- k6 u距离我学这个很长时间了，翻笔记找到的。有问题欢迎讨论

as135d

Jamin_Zheng 发表于 2021-7-8 11:53
B D ???

我也投這組答案一票  參考networktut

v785134

請問有人有新的題目了嗎

huwei40

新题吗？

itwong

junejune 发表于 2021-7-8 21:12
我貼錯圖了 這張才對
. X. ~! a+ u: E4 t4 f
, I8 C+ T+ s7 J. \& M! N; yhttps://ibb.co/wy7MsRH

应该改成tunnel mode，而且crypto isakmp key xxxxx address y.y.y.y, ip地址应该为NBMA hub address(也就是public IP），如果所示为192.1.1.1. 所以答案为C跟E

itwong

Reni 发表于 2021-7-9 09:45
我认为是AD
Crypto isakmp key KEY address x.x.x.x 地址应该填对端wan口地址，也可写全0匹配所有对等体。 ...

should be CE, isakmp key KEY address ADDRESS， where ADDRESS should be the public ip/nbma address for the dmvpn hub, in this case, it's 192.1.1.1. dmvpn uses gre tunnel, so mode should be tunnel.

seraf2001

感謝分享資訊

mango007

恭喜恭喜恭喜     代表地球村民发来贺电