Based on the debug output, which type of mismatch is preventing the VPN from coming up?

Refer to the exhibit.

Based on the debug output, which type of mismatch is preventing the VPN from coming up?
A . interesting traffic
B. lifetime
C. preshared key
D. PFS

View Answer

Answer: A

Explanation:

The first of the two TS payloads is known as TSi (Traffic Selector- initiator). The second is known as TSr (Traffic Selector-responder). TSi specifies the source address of traffic forwarded from (or the destination address of traffic forwarded to) the initiator of the Child SA pair. https://www.rfc-editor.org/rfc/rfc5996#page-40

If the responder’s policy does not allow it to accept any part of the proposed Traffic Selectors, it responds with a TS_UNACCEPTABLE Notify message.