請問這道題目的答案？(300-410)

junejune

爬文發現有好多不同的答案．．．不知道正確答案到底是？


Refer to the exhibit. After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both spoke-to-spoke and
hub were not establishing. Which two actions resolve the issue? (Choose two.)

* l4 @8 W6 v; J7 {* Y* _8 r
! `* }9 v. d" h2 H  a+ s
: E2 h! A2 l* U3 X6 o0 bA. Change the mode from mode tunnel to mode transport on R3.
B. Remove the crypto isakmp key cisco address 10.1.1.1 on R2 and R3.
C. Configure the crypto isakmp key cisco address 192.1.1.1 on R2 and R3.
D. Configure the crypto isakmp key cisco address 0.0.0.0 on R2 and R3.
E. Change the mode from mode transport to mode tunnel on R2.



# @, s% C) @4 V; ^# l- b9 r3 i. n% Z
8 s# a$ M! f! f  {6 R补充内容 (2021-7-8 21:11):
% c; |& Y$ {' \! {啊啊貼錯圖了
: v% l- B, V5 j1 }4 k
补充内容 (2021-7-8 21:13):
' G- E% P$ i" V+ Y! yhttps://ibb.co/wy7MsRH
( x" L5 a" t+ v
+ {; x% y. M) ^' @( e  [4 O, A9 k這個才對

Jamin_Zheng

B D ???

rensiang

是不是貼錯圖片了阿

: d. @" |/ h1 m; Z7 I' L圖片上的設定跟答案完全沒關係

junejune

rensiang 发表于 2021-7-8 15:47
是不是貼錯圖片了阿
1 O' y+ }0 `8 p- ?
. p( v7 T( m  e3 B- ^圖片上的設定跟答案完全沒關係

我貼錯圖了 這張才對
; H, W4 A# q  c7 P
https://ibb.co/wy7MsRH

4 v/ y% I" y- c# m* l: S9 n

junejune

) m$ Z# t0 ~8 L# \/ T2 M& ?2 P: q/ j
. X! S5 {8 L1 h; E貼錯圖了ＱＱ

0 j  H# z# Q; w! ?爬文發現有好多不同的答案．．．不知道正確答案到底是？
0 U, M4 Y8 A3 W* Q8 p3 j9 `, j3 C
: Z# g6 Q' N% I  T" i" F
Refer to the exhibit. After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both spoke-to-spoke and
6 j9 h; Q$ z* |2 whub were not establishing. Which two actions resolve the issue? (Choose two.)
+ E2 M+ e- G3 ?% e! o% W9 o4 ^+ K
' ]2 f) \# R0 f' ]

, |* p+ g; s: b6 _: z4 g  w' ~" G

Reni

我认为是AD
7 a& m% y" o8 i/ I+ PCrypto isakmp key KEY address x.x.x.x 地址应该填对端wan口地址，也可写全0匹配所有对等体。DMVPN会有Spoke之间直连，应该用全0匹配所有对等体
0 n$ i+ L8 q: [0 I0 }DMVPN底层传输使用GRE，GRE隧道封装过程产生了新的传输点（外网接口）与加密点重合，故应使用传输模式。如用隧道模式也能通信，但额外添加的IP包头没有任何意义，且被认为是错误的配置。
9 e5 E7 f" m; n8 ^% d距离我学这个很长时间了，翻笔记找到的。有问题欢迎讨论
& G2 I$ z# t2 R6 \9 X' |

as135d

Jamin_Zheng 发表于 2021-7-8 11:53
B D ???

" g* c' A- W3 {. ?3 H0 L我也投這組答案一票  參考networktut

v785134

請問有人有新的題目了嗎

huwei40

新题吗？

itwong

junejune 发表于 2021-7-8 21:12
我貼錯圖了 這張才對
2 \5 Q* K: W" P! I: P
. W8 p: n4 R& hhttps://ibb.co/wy7MsRH

: {* F2 w9 @' f6 x1 {& C应该改成tunnel mode，而且crypto isakmp key xxxxx address y.y.y.y, ip地址应该为NBMA hub address(也就是public IP），如果所示为192.1.1.1. 所以答案为C跟E

itwong

Reni 发表于 2021-7-9 09:45
我认为是AD
. K; E* |" @; \5 K7 fCrypto isakmp key KEY address x.x.x.x 地址应该填对端wan口地址，也可写全0匹配所有对等体。 ...

should be CE, isakmp key KEY address ADDRESS， where ADDRESS should be the public ip/nbma address for the dmvpn hub, in this case, it's 192.1.1.1. dmvpn uses gre tunnel, so mode should be tunnel.

seraf2001

感謝分享資訊

mango007

恭喜恭喜恭喜     代表地球村民发来贺电