問題文
What role does a tunnel interface play when an engineer builds a route-based IPSec VPN on a firewall?
選択肢
- It performs the encryption itself, replacing the need for an IPSec crypto profile, so the algorithms are chosen by the tunnel interface and the peers agree on them during setup.
- It advertises the remote networks into the routing protocol automatically, so the remote prefixes appear on both peers.
- It holds the pre-shared key and the proposal list for the negotiation, so each tunnel needs its own tunnel interface even when the peers and the encryption settings are identical.
- It is the logical interface that the routing table points to, so that traffic chosen by a route is handed to the tunnel and encrypted.