After completing a site-to-site VPN setup between two routers, application performance over the tunnel is slow. You issue the show crypto ipsec sa command and see the following output. What does this output suggest?

After completing a site-to-site VPN setup between two routers, application performance over the tunnel is slow. You issue the show crypto ipsec sa command and see the following output. What does this output suggest?

interfacE. Tunnel100

Crypto map tag: Tunnel100-head-0, local addr 10.10.10.10

protected vrF. (none)

local ident (addr/mask/prot/port): (10.10.10.10/255.255.255.255/47/0)

remote ident (addr/mask/prot/port): (10.20.20.20/255.255.255.255/47/0)

current_peer 209.165.200.230 port 500

PERMIT, flags={origin_is_acl,}

#pkts encaps: 34836, #pkts encrypt: 34836, #pkts digest: 34836

#pkts decaps: 26922, #pkts decrypt: 19211, #pkts verify: 19211

#pkts compresseD. 0, #pkts decompresseD. 0

#pkts not compresseD. 0, #pkts compr. faileD. 0

#pkts not decompresseD. 0, #pkts decompress faileD. 0

#send errors 0, #recv errors 0
A . The VPN has established and is functioning normally.
B . There is an asymmetric routing issue.
C . The remote peer is not receiving encrypted traffic.
D . The remote peer is not able to decrypt traffic.
E . Packet corruption is occurring on the path between the two peers.

View Answer

Answer: E