問題文
A route-based VPN with one traffic selector is configured with the multi-sa statement listing three forwarding classes, and the peer is a device that supports the same feature. How many second phase security associations does the local gateway negotiate for that traffic selector, and which one comes first?
選択肢
- Eighteen, and the association for the first listed class comes first, because each class needs one association per direction plus a spare and the total is capped there.
- Eight, and the listed classes map onto the first three of them, because the statement reserves the platform maximum for the VPN as soon as it is committed.
- Four, and the one that carries packets outside the listed classes is negotiated first and torn down last.
- Three, and the class that appears first in the configuration is negotiated first and torn down last.