A newly installed spoke router is configured for DMVPN with the ip mtu 1400 command. Which configuration allows the spoke to use fragmentation with the maximum negotiated TCP MTU over GRE?
A.
ip tcp adjust-mss 1360 crypto ipsec fragmentation mtu-discovery
B.
ip tcp adjust-mss 1360 crypto ipsec fragmentation after-encryption
C.
ip tcp payload-mtu 1360 crypto ipsec fragmentation after-encryption
D.
ip tcp payload-mtu 1360 crypto ipsec fragmentation mtu-discovery
"When IPsec is being used, it is customary to set the MTU size on the tunnel interfaces to 1,400 bytes and to set the TCP-MSS-adjust to 1,360 bytes. "
https://www.networkworld.com/article/2224654/mtu-size-issues.html
For me "# crypto ipsec fragmentation before-encryption" would make more sense, but that option is not give, so I vote for "B".
" If the routers are performing fragmentation on behalf of the source node, it may be desirable to have the fragmentation performed prior to encryption, so the destination tunnel router doesn't have to reassemble the fragments and then perform the decryption."
https://manualzz.com/doc/33447188/configuring-ipsec-vpn-fragmentation-and-mtu
Correct!
R5(config-if)#crypto ipsec fragmentation ?
after-encryption Perform fragmentation of large packets after IPSec
encapsulation
before-encryption Perform fragmentation of large packets before IPSec
encapsulation.
upvoted 2 times
...
This section is not available anymore. Please use the main Exam Page.300-410 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
[Removed]
9 months, 1 week agoHungarianDish_111
1 year, 11 months agoZizu007
2 years, 3 months ago