2V0-41.24 Question 196
Select 3An organization is deploying an IPSec VPN using VMware NSX to establish secure communication between two data centers. As part of the configuration, what requirements must be met to ensure proper IPSec VPN functionality?
- A
Both NSX Edge devices must have valid IP addresses configured on their external interfaces.
- B
A shared pre-shared key or certificate must be configured and exchanged between the two NSX Edge devices.
- C
The NSX Manager must have direct communication with the remote data center's NSX Manager.
- D
The MTU size of the VPN tunnel must be greater than 1500 bytes.
- E
IKE and IPSec protocols must be configured with compatible encryption algorithms on both sites.
Show answer and explanation
Correct answers: A, B, E
Explanation
To establish an IPSec VPN in NSX, key requirements include valid IP addresses on the external interfaces of the NSX Edge devices, proper authentication via a pre-shared key or certificate, and compatible encryption algorithms for IKE and IPSec protocols. Direct communication between the NSX Managers or an MTU size greater than 1500 bytes is not required for IPSec VPN functionality.
- A. Correct.
Correct. NSX Edge devices require valid IP addresses on their external interfaces to establish the VPN tunnel.
- B. Correct.
Correct. A pre-shared key or certificate is mandatory for authentication and establishing the IPSec VPN connection.
- C. Incorrect.
Incorrect. NSX Manager does not need direct communication with the remote NSX Manager. Communication is established between NSX Edge devices.
- D. Incorrect.
Incorrect. The MTU size should typically be adjusted to accommodate the VPN overhead, but it does not need to exceed 1500 bytes.
- E. Correct.
Correct. Compatible encryption algorithms for IKE and IPSec are necessary for the VPN negotiation and secure communication.