Which of the following can be said about numbered VPN Tunnel Interfaces (VTIs)?
A.
VTIs are assigned only local addresses, not remote addresses
B.
VTIs cannot share IP addresses
C.
VTIs cannot use an already existing physical-interface IP address
D.
VTIs are only supported on Nokia IPSO
Answer C.
Numbered VTI:
You configure a local and remote IP address for each numbered VPN Tunnel Interface (VTI). For each Security Gateway, you configure a local IP address, a remote address, and the local IP address source for outbound connections to the tunnel. The remote IP address must be the local IP address on the remote peer Security Gateway. More than one VTI can use the same IP Address, but they cannot use an existing physical interface IP address.
https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/13824.htm
0
0