2V0-41.24 Question 195
Select 3An organization is configuring an IPSec VPN between two NSX-T Data Center environments. During the setup, the network administrator encounters connectivity issues. Which of the following are required to ensure a successful IPSec VPN configuration in NSX-T?
- A
Both endpoints must have public IP addresses or be reachable via NAT.
- B
The Phase 1 and Phase 2 encryption algorithms must match on both endpoints.
- C
The MTU size must be set to 1600 bytes on both endpoints.
- D
A pre-shared key or certificate must be configured for authentication.
- E
GRE tunneling must be enabled between the endpoints.
Show answer and explanation
Correct answers: A, B, D
Explanation
To successfully configure an IPSec VPN in NSX-T Data Center, certain requirements must be met. Both endpoints must have reachable IP addresses (public or NAT), the Phase 1 and Phase 2 encryption settings must match, and a pre-shared key or certificate must be used for authentication. Ensuring these configurations prevents connectivity issues. MTU size and GRE tunneling are not specific requirements for IPSec VPN setup in NSX-T.
- A. Correct.
This is correct. Both endpoints must have public IP addresses or be reachable via NAT for proper communication.
- B. Correct.
This is correct. Matching encryption algorithms for both Phase 1 (IKE) and Phase 2 (IPSec) are essential for establishing a secure VPN tunnel.
- C. Incorrect.
This is incorrect. While MTU size is an important consideration, IPSec VPN does not specifically require an MTU of 1600 bytes. The MTU size is adjusted based on network requirements and protocol overhead.
- D. Correct.
This is correct. IPSec VPN requires either a pre-shared key or a certificate for authentication between endpoints.
- E. Incorrect.
This is incorrect. GRE tunneling is not a requirement for IPSec VPN in NSX-T. IPSec is a standalone protocol and does not depend on GRE.