A rogue static route is installed in the routing table of a Cisco FlexVPN and is causing traffic to
be blackholed. Which command should be used to identify the peer from which that route
originated?
A.
show crypto ikev2 sa detail
B.
show crypto route
C.
show crypto ikev2 client flexvpn
D.
show ip route eigrp
E.
show crypto isakmp sa detail
Correct answer to this question is A.
If you are using FlexVPN with Authorization policy and setting routes in it using “route set ACL” command those routes don’t appear under show crypto route command.
Show crypto ikev2 sa detail command shows the routes learned from every single tunnel.
0
0