A network designer has provisioned a router to use IPsec to encrypt the traffic over a GRE tunnel going to a web server at a remote location. From the router, the network designer can ping the web server, although the users in the office comment that they are unable to reach it. (Note: The DF bit is not set.) Which aspect should be changed in the design of the virtual connection?
A) IP addresses of the GRE tunnel endpoints
B) IPsec configuration
C) MTU size on the GRE tunnel
D) encapsulation of the GRE tunnel

Question

Quizplus · Accepted Answer

The issue is likely related to the MTU size on the GRE tunnel. Since the DF bit is not set, packets may be getting fragmented, and the GRE tunnel might not be handling the fragmentation properly, causing issues for users. Adjusting the MTU size can help resolve this.

A Network Designer Has Provisioned a Router to Use IPsec