JNCIS-ENT: Juniper Networks Certified Specialist – Enterprise Routing and Switching — Question 17

You are asked to convert two standalone SRX Series devices to a chassis cluster deployment. You must ensure that your IPsec tunnels will be compatible with the new deployment.
In this scenario, which two interfaces should be used when binding your tunnel endpoints? (Choose two.)

Answer options

• A. pp0
• B. reth
• C. lo0
• D. ge

Correct answer: B, D

Explanation

The correct interfaces for binding IPsec tunnel endpoints in a chassis cluster deployment are reth and ge. The reth interface is specifically designed for redundancy and failover in chassis clusters, while ge interfaces are standard Gigabit Ethernet interfaces used for connectivity. The pp0 and lo0 interfaces are not suitable for this purpose as they serve different functions.