NSE 7 – SD-WAN 6.4 — Question 57

Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

Answer options

• A. get ipsec tunnel list
• B. get router info routing-table
• C. diagnose debug application ike
• D. diagnose sys virtual-wan-link service

Correct answer: C

Explanation

The correct answer, 'diagnose debug application ike', is used specifically for debugging IKE (Internet Key Exchange) processes, which are crucial during ADVPN negotiation. The other options do not directly relate to real-time troubleshooting of the ADVPN negotiation; 'get ipsec tunnel list' provides tunnel status, 'get router info routing-table' shows routing information, and 'diagnose sys virtual-wan-link service' is for monitoring WAN link services.