Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Get Unlimited Access

Cisco Discussions

Exam 300-730 topic 1 question 89 discussion

Actual exam question from Cisco's 300-730

Question #: 89
Topic #: 1

[All 300-730 Questions]

Refer to the exhibit. An IKEv2 site-to-site tunnel between an ASA and a remote peer is not building successfully. What will fix the problem based on the debug output?

A. Ensure crypto IPsec policy matches on both VPN devices.
B. Install the correct certificate to validate the peer.
C. Correct crypto access list on both VPN devices.
D. Specify the peer IP address in the tunnel group name.

Show Suggested Answer

Suggested Answer: A 🗳️

by [deleted] at May 8, 2022, 11:57 a.m.

Comments

Submit Cancel

[Removed]

Highly Voted 2 years, 2 months ago

Selected Answer: C

TS - traffic selector - which traffic to be tunneled. TS_UNACCEPTABLE means the interesting traffic doesn't match

upvoted 6 times

...

7df6b1c

Most Recent 11 hours, 46 minutes ago

I think A .. Why should we correct on BOTH devices the ACL? Makes no sense

upvoted 1 times

...

shadow2020

5 months, 3 weeks ago

the error message says, "There was no IPSEC POLICY found for received TS" TS = Traffic selector (IP), so this means nothing to do with the IP but rather IPSec policy

upvoted 2 times

...