You are having issues with dynamic routing after a failover. The traffic is now coming from the
backup and is being dropped as out of state. What is the BEST configuration to avoid stateful
inspection dropping your dynamic routing traffic?
A.
Enable Visitor mode.
B.
Create additional explicit rules.
C.
Implement Wire mode.
D.
In Global Properties select Accept other IP protocols stateful replies for unknown services.
Since no stateful inspection takes place in Wire mode, no packets can be discarded. The VPN connection is no different from any other connection along a dedicated wire. This is the meaning of “Wire Mode.” Since stateful inspection no longer takes place, dynamic routing protocols (which do not survive state verification in non-wire mode configuration) can now be deployed.
0
0