Refer to the exhibit.
An engineer must configure a LAN-to-LAN IPsec VPN between R1 and the remote router. Which IPsec
Phase 1 configuration must the engineer use for the local router?
crypto isakmp policy 5authentication pre-shareencryption 3deshash shagroup 2!crypto isakmp key cisco123 address 200.1.1.3
crypto isakmp policy 5authentication pre-shareencryption 3deshash md5group 2!crypto isakmp key cisco123 address 200.1.1.3
crypto isakmp policy 5authentication pre-shareencryption 3deshash md5group 2!crypto isakmp key cisco123 address 199.1.1.1
crypto isakmp policy 5authentication pre-shareencryption 3deshash md5group 2!crypto isakmp key cisco123! address 199.1.1.1
Explanation
In the “crypto isakmp key … address ” command, the address must be of the IP address of the other
end (which is 200.1.1.3 in this case) so Option A and Option B are correct. The difference between
these two options are in the hash SHA or MD5 method but both of them can be used although SHA is
better than MD5 so we choose Option A the best answer.
Note: Cisco no longer recommends using 3DES, MD5 and DH groups 1, 2 and 5.
Submit