Which command is used to avoid IP Fragmentation when configuring IPSec on a NetScreen
device?

Which three are part of the configuration of an IKE Phase 1 gateway? (Choose three.)

Which command is used to avoid IP fragmentation when configuring IPSec on a ScreenOS
device?

You are looking at the event log of the responding device and it says
Rejected an initial Phase 1 packet from an unrecognized peer gateway
Which is NOT a likely reason for the failure?

Your VPN is failing during Phase 2 communication. You check your local event log and do
not see anything to indicate why the failure occurred. What action should be taken to fix the
problem?

Your VPN tunnel does not pass traffic. You run the get ike cookie command and discover
that there is no cookie. What two (2) options should you check?

You are looking at the event log of the initiating device and it says
Received notify message for DOI <1> <14> <NO_PROPOSAL_CHOSEN>.
What is likely to be the problem?

You are looking at the event log of the responding device and it says:
Rejected an initial Phase 1 packet from an unrecognized peer gateway
What are three likely reasons for the failure? (Choose three.)

Your VPN is failing during Phase 2 negotiation, and you are the initiator. You check your
local event log and see IPSec messages but no failures.
What is the next logical troubleshooting step?

Your VPN tunnel does not pass traffic. You run the get ike cookie command and discover
that there is no cookie.
Which two should be verified? (Choose two.)