CISCO IPSEC QUESTIONS

Question 13)

What is the name of the policy defining the ike phase 2 configuration properties?

.

.

.

.

.

Question 14)

Given the information in the screenshot, the line "crypto map SDM_CMAP_1 1 ipsec-isakmp" has an error. What would be the correct line to use?

.

.

.

.

.

Question 15)

How will traffic that does not match that identified by the ACL be treated by the router?

crypto isakmp policy 2 authenticatin pre-share encr aes 128 hash md5 group .2 lifetime 21600 exit crypto isakmp key cisco123 address 23.0.0.1 crypto ipsec transform-set MY-SET esp-sha-hmac esp-aes 256 mode tunnel exit ip access-list extended SDM 1 permit ip 172.16.0.0 0.0.0.255 10.0.0.00.0.0.255 exit crypto map SDM CMAP 1 1 ipsec-isakmp match address SDM 1 set transform-set MY-SET set peer 23.0.0.1 exit interface gl/0 crypto map SDM CMAP 1 end