問題文
A route-based VPN carries several traffic selectors, and during a redesign the external interface that terminates IKE has to move into another virtual router. The team asks what the documented procedure calls for. Which step comes first, and why?
選択肢
- Delete the traffic selectors and write them again after the move, because a traffic selector keeps the identifier of the virtual router that it was committed in and stops matching once that identifier changes.
- Raise the number of traffic selectors of that VPN to the platform maximum of 200 before the move, because the software keeps one event slot for each configured selector while an interface changes hands.
- Deactivate that VPN tunnel and commit without it before the interface moves since the software mishandles the several interface events raised by the move, and clear traffic could otherwise slip into that tunnel past every one of the traffic selectors.
- Move the secure tunnel interface into the new virtual router first and commit, because the external interface and the secure tunnel interface have to sit in one virtual router while the tunnel is up.