Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or__________.
A . On all satellite gateway to satellite gateway tunnels
B . On specific tunnels for specific gateways
C . On specific tunnels in the community
D . On specific satellite gateway to central gateway tunnels
Answer: C
Explanation:
Each VPN tunnel in the community may be set to be a Permanent Tunnel. Since Permanent Tunnels are constantly monitored, if the VPN tunnel is down, then a log, alert, or user defined action, can be issued. A VPN tunnel is monitored by periodically sending "tunnel test" packets. As long as responses to the packets are received the VPN tunnel is considered "up." If no response is received within a given time period, the VPN tunnel is considered "down." Permanent Tunnels can only be established between Check Point Security Gateways.
The configuration of Permanent Tunnels takes place on the community level and:
– Can be specified for an entire community. This option sets every VPN tunnel in the community as
permanent.
– Can be specified for a specific Security Gateway. Use this option to configure specific Security Gateways to have permanent tunnels.
– Can be specified for a single VPN tunnel. This feature allows configuring specific tunnels between specific Security Gateways as permanent.
Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_VPN_AdminGuide/14018
Leave a Reply