JNCIE-SEC Practice Questions - Juniper Networks Certified Expert, Security (JNCIE-SEC) Exam

Access More Questions

During a JNCIE-SEC lab, you must configure ADVPN (Auto Discovery VPN) so that spoke-to-spoke traffic flows directly without traversing the hub after the initial shortcut is established. Which two configurations are mandatory on the spoke SRX to enable shortcut tunnel establishment?

Configure 'set security ipsec vpn establish-tunnels on-traffic' and 'set security ike gateway dynamic connections-limit ' on each spoke Configure 'set security ipsec vpn establish-tunnels on-traffic' and set the IKE gateway with 'set security ike gateway dynamic distinguished-name wildcard' Configure the IKE proposal with 'set security ike proposal authentication-method ecdsa-signatures' and enable PFS group 20 on the IPsec proposal Configure 'set routing-options static route next-hop st0.0' and set BGP with 'set protocols bgp group type internal' over the hub tunnel for shortcut route advertisement

Correct Answer:

Configure 'set security ipsec vpn establish-tunnels on-traffic' and set the IKE gateway with 'set security ike gateway dynamic distinguished-name wildcard'

Access more questions from this quiz

Continue to JNCIE-SEC Practice Questions - Juniper Networks Certified Expert, Security (JNCIE-SEC) Exam for more practice questions and the full quiz experience.

Access More Questions