ESP verifies only the IP payload in NAT traversal, but the ESP port information will be encrypted causing the layer 4 information to be unusable with PAT.Using the IPsec NAT transparency feature can solve this problem, the ESP packet is encapsulated in a UDP header and contains the information necessary to enable PAT to work.
Answer(s): A
A Site to Site IPsec VPN tunnel negotiation has been lost. How can you view the IKE Phase 2 security associations, established connections, and configurations? (Choose two answers)
Answer(s): A,B
Which command can be used to set the virtual IP address of VRRP group 1 when you configure USG hot backup?
Which of the following statements about VRRP and VGMP packets are correct? (Choose 2 answers)
Answer(s): B,D
The key steps to configure virtual firewalls include the following:1Configure the IP address of the interface2Create a VPN instance and the VPN instance of the specified routing instance and include the interface to the security domain4 Configure Inter-domain configuration default packet filtering rules5 Bind the interface with the VPN instanceWhat is the correct order?
Answer(s): C
Post your Comments and Discuss Huawei H12-721 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the H12-721 content, but please register or login to continue.