Which statement is true when implementing a router with a dynamic public IP address in a crypto
map based site-to-site VPN?
A.
The router must be configured with a dynamic crypto map.
B.
Certificates are always used for phase 1 authentication.
C.
The tunnel establishment will fail if the router is configured as a responder only.
D.
The router and the peer router must have NAT traversal enabled.
Explanation: