問題文
One route-based VPN is bound to a point-to-point secure tunnel interface and carries four traffic selectors. Two of them overlap, because the one written earlier covers a narrow prefix pair and the one written later covers the wider prefix pair that contains it. A packet matches both of them. Which traffic selector picks the tunnel that encrypts that packet?
選択肢
- The one with the longer prefix, because a longest prefix match runs across the traffic selectors of one VPN before the security association is picked.
- Neither of them, because a packet that matches two traffic selectors is dropped until the overlapping configuration is removed.
- The one whose security association was negotiated most recently, because a newer association takes over from an older one that covers the same pair of addresses.
- The one that appears earlier in the configuration, because the first configured match wins.