Which output of the show crypto ipsec sa | include ident command is true?

Refer to the exhibit.

Which output of the show crypto ipsec sa | include ident command is true?
A . local ident(addr/mask/prot/port):(0.0.0.0/0.0.0.0/17/47)
remote ident(addr/mask/prot/port):(0.0.0.0/0.0.0.0/17/47)
B . local ident(addr/mask/prot/port):(0.0.0.0/0.0.0.0/0/0)
remote ident(addr/mask/prot/port):(0.0.0.0/0.0.0.0/0/0)
C . local ident(addr/mask/prot/port):(209.165.201.6/255.255.255.255/47/0)
remote ident(addr/mask/prot/port):(209.165.201.2/255.255.255.255/47/0)
D . local ident(addr/mask/prot/port):(0.0.0.0/0.0.0.0/47/0)
remote ident(addr/mask/prot/port):(0.0.0.0/0.0.0.0/47/0)

View Answer

Answer: C

Explanation:

This command show Phase 2 tunnel information (IPsec security associations (SAs) built between peers).

An example of an encrypted tunnel is built between 20.1.1.1 and 10.1.1.1 and the output of the “show crypto ipsec sa” command is shown below:

The line “local ident (addr/mask/prot/port)” means local selector that is used for encryption and

decryption.