A network engineer is configuring DMVPN and entered the crypto isakmp key cisc0380739941 address 0.0.0.0 command on hostA. The tunnel is not being established to hostB. What action is needed to authenticate the VPN?
A.
Change isakmp to ikev2 in the command on hostA.
B.
Enter the command with a different password on hostB.
C.
Enter the same command on hostB.
D.
Change the password on hostA to the default password.
The crypto isakmp key command is used to configure a preshared key for ISAKMP authentication between two peers. The address 0.0.0.0 indicates that the key is valid for any peer address. Therefore, the same command must be entered on hostB with the same password in order to establish the tunnel with hostA. Changing the protocol to ikev2, using a different password, or changing the password to the default will not solve the problem, as they will create a mismatch in the authentication parameters. References:
DMVPN - Concepts & Configuration, section “DMVPN - What is it?”
DMVPN Hub as the CA Server for the DMVPN Network Configuration Example, section “Prerequisites”
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit