Q13Policies
An engineer configures this DIA data policy for VPN 10: Which policy sequence enables DIA for external networks?
← → navigate · a answer
Community votes
Discussion · 7
D 2
Selected Answer: D
D is the correct syntax list (except one typo in nat use-vpn, it must be nat use-vpn0).
A is wrong (sequence 5 and destination ip 0.0.0.0 action reject).
B is wrong (source ip 0.0.0.0)
C is wrong (sequence 5 and source ip 0.0.0.0)
D 2
Selected Answer: D
D is correct
D 1
Selected Answer: D
D is correct
C 1
Selected Answer: C
C is right.
sequence 5 is for source prefix (means all source IPs)
sequence 10 is for destination prefix
NAT syntax is right only on answer - C
C 1
Selected Answer: C
NAT syntax looks right in C
1
But the sequence has to be greater than 5, so the internal subnet can use the overlay tunnel
1
But the sequence has to be greater than 10, so the internal subnet can use the overlay tunnel