A、A.when one of the tunnel peers has a dynamic IP address
B、B.when one of the tunnel peers wants to force main mode to be used
C、C.when fragmentation of the IKE packet is required between the two peers
D、D.when one of the tunnel peers wants to specify a different phase 1 proposal
更多“For IKE phase 1 negotiations， when is aggressive mode typically used？（）”相关的问题
A、IKE gateway B、secure tunnel interface C、security policy to permit the IKE traffic D、security policy referencing the IPsec VPN tunnel
A、IKE keepalives are unidirectional and sent every ten seconds B、IPsec uses the Encapsulating Security Protocol （ESP） or the Authentication Header （AH）protocol for exchanging keys C、To establish IKE SA, main mode utilizes six packets while aggressive mode utilizes only threepackets D、IKE uses the Diffie-Hellman algorithm to generate symmetrical keys to be used by IPsec peers
A、QoS and IPSec should never be used together. B、IKE/ISAKMP packets are DiffSERV codepoint CS6, so the traffic is never dropped. C、Source IKE/ISAKMP packets off the loop-back address. D、Classify IKE/ISAKMP packets so they are appropriately prioritized.
A、A.secure tunnel interface B、B.security policy to permit the IKE traffic C、C.a route for the tunneled transit traffic D、D.tunnel policy for transit traffic referencing the IPsec VPN
A、A.proxy-ID B、B.phase 2 proposal C、C.Diffie-Hellman group key D、D.security protocol （ESP or AH）
A、show ike security-associations B、show ipsec security-associations C、show security ike security-associations D、show security ipsec security-associations
A、IPSec SA是双向的，IKE SA是单向的 B、IPSec SA是双向的，IKE SA是双向的 C、IPSec SA是单向的，IKE SA是单向的 D、IPSec SA是单向的，IKE SA是双向的
客服
TOP
查看正确答案
