JNCIA-SEC: Juniper Networks Certified Associate – Security (2021) — Question 74

What is an IP addressing requirement for an IPsec VPN using main mode?

Answer options

• A. One peer must have dynamic IP addressing.
• B. One peer must have static IP addressing.
• C. Both peers must have dynamic IP addresses.
• D. Both peers must have static IP addressing.

Correct answer: D

Explanation

For an IPsec VPN using main mode, both peers are required to have static IP addresses to ensure a consistent and reliable connection. Dynamic IP addressing may lead to connection issues since IP addresses can change, making it difficult for peers to establish a secure tunnel.