does the given output show?

Refer to the exhibit.

While troubleshooting site-to-site VPN, you issued the show crypto isakmp sa command.

What

does the given output show?
A . IPsec Phase 1 is established between 10.10.10.2 and 10.1.1.5.
B . IPsec Phase 2 is established between 10.10.10.2 and 10.1.1.5.
C . IPsec Phase 1 is down due to a QM_IDLE state.
D . IPsec Phase 2 is down due to a QM_IDLE state.

View Answer

Answer: A

Explanation:

This is the output of the #show crypto isakmp sa command. This command shows the Internet Security Association Management Protocol (ISAKMP) security associations (SAs) built between peers – IPsec Phase1. The "established" clue comes from the state parameter QM_IDLE – this is what we want to see. More on this http://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/5409­ipsec-debug- 00.html