You are troubleshooting a site-to-site VPN issue where the tunnel is not establishing. After issuing
the debug crypto isakmp command on the headend router, you see the following output. What
does this output suggest?
1d00h: ISAKMP (0:1): atts are not acceptable. Next payload is 0

1d00h: ISAKMP (0:1); no offers accepted!
1d00h: ISAKMP (0:1): SA not acceptable!
1d00h: %CRYPTO-6-IKMP_MODE_FAILURE. Processing of Main Mode failed with peer at
10.10.10.10

You are troubleshooting a site-to-site VPN issue where the tunnel is not establishing. After issuing
the debug crypto ipsec command on the headend router, you see the following output. What does
this output suggest?
1d00h: IPSec (validate_proposal): transform proposal
(port 3, trans 2, hmac_alg 2) not supported
1d00h: ISAKMP (0:2) : atts not acceptable. Next payload is 0
1d00h: ISAKMP (0:2) SA not acceptable

Which adaptive security appliance command can be used to see a generic framework of the

requirements for configuring a VPN tunnel between an adaptive security appliance and a Cisco
IOS router at a remote office?

After completing a site-to-site VPN setup between two routers, application performance over the
tunnel is slow. You issue the show crypto ipsec sa command and see the following output. What
does this output suggest?
interfacE. Tunnel100
Crypto map tag: Tunnel100-head-0, local addr 10.10.10.10
protected vrF. (none)
local ident (addr/mask/prot/port): (10.10.10.10/255.255.255.255/47/0)
remote ident (addr/mask/prot/port): (10.20.20.20/255.255.255.255/47/0)
current_peer 209.165.200.230 port 500
PERMIT, flags={origin_is_acl,}
#pkts encaps: 34836, #pkts encrypt: 34836, #pkts digest: 34836
#pkts decaps: 26922, #pkts decrypt: 19211, #pkts verify: 19211
#pkts compresseD. 0, #pkts decompresseD. 0
#pkts not compresseD. 0, #pkts compr. faileD. 0
#pkts not decompresseD. 0, #pkts decompress faileD. 0
#send errors 0, #recv errors 0

Which Cisco adaptive security appliance command can be used to view the count of all active
VPN sessions?

Refer to the exhibit.

An administrator had the above configuration working with SSL protocol, but as soon as the
administrator specified IPsec as the primary protocol, the Cisco AnyConnect client was not able to
connect. What is the problem?

The Cisco AnyConnect client fails to connect via IKEv2 but works with SSL. The following error
message is displayed:
“Login Denied, unauthorized connection mechanism, contact your administrator”

What is the most possible cause of this problem?

The Cisco AnyConnect client is unable to download an updated user profile from the ASA
headend using IKEv2. What is the most likely cause of this problem?

Which two troubleshooting steps should be taken when Cisco AnyConnect cannot establish an
IKEv2 connection, while SSL works fine? (Choose two.)

Regarding licensing, which option will allow IKEv2 connections on the adaptive security
appliance?