Free Preparation Discussions
MENU
Fortinet Exam NSE7_NST-7.2 Topic 5 Question 8 Discussion
Topic #: 5
Refer to the exhibit. which contains the output of diagnose vpn tunnel list.
Which command will capture ESP traffic for the VPN named DialUp_0?
Capturing ESP Traffic:
ESP (Encapsulating Security Payload) traffic is associated with IPsec and is identified by the protocol number 50. To capture ESP traffic, you need to filter packets based on this protocol.
In this specific case, you also need to filter for the host associated with the VPN tunnel, which is 10.200.3.2 as indicated in the exhibit.
Sniffer Command:
The correct command to capture ESP traffic for the VPN named DialUp_0 is:
diagnose sniffer packet any 'esp and host 10.200.3.2'
This command ensures that only ESP packets to and from the specified host are captured, providing a focused and relevant data set for troubleshooting.
Pascal Bosman
12 days agoKing
1 months agoAshanti
1 months agoFrance
4 days agoLonna
9 days agoDong
11 days agoDominque
16 days agoDelpha
1 months agoBrittney
24 days agoNan
27 days agoLeandro
1 months agoFelix
1 months agoGlenn
2 months agoJospeh
14 days agoLashandra
17 days agoAleisha
30 days agoMarisha
1 months agoAshley
2 months agoBarrie
2 months agoKiera
1 months agoThaddeus
2 months ago