What does the status show?

Refer to the Exhibit.

After configurating an IPsec VPN, an engineer enters the show command to verify the ISAKMP SA status.

What does the status show?
A . ISAKMP SA is authenticated and can be used for Quick Mode.
B . Peers have exchanged keys, but ISAKMP SA remains unauthenticated.
C . VPN peers agreed on parameters for the ISAKMP SA
D . ISAKMP SA has been created, but it has not continued to form.

View Answer

Answer: A

Explanation:

The status “QM_IDLE” indicates that the ISAKMP Security Association (SA) is in a Quick Mode idle state, meaning it’s authenticated and can be used for Quick Mode. In this state, the SA is established but idle, waiting to be activated to protect data flows between peers.

References: The Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) course provides a deep dive into Service Provider technologies including core architecture, services, networking, automation, quality of services, security, and network assurance.