Implementing Cisco Network Security (IINS v3.0) (#189)

Refer to the exhibit.

While troubleshooting site-to-site VPN, you issued the show crypto ipsec sa command. What does the given output show?

IPSec Phase 2 is established between 10.1.1.1 and 10.1.1.5.
ISAKMP security associations are established between 10.1.1.5 and 10.1.1.1.
IKE version 2 security associations are established between 10.1.1.1 and 10.1.1.5.
IPSec Phase 2 is down due to a mismatch between encrypted and decrypted packets.