When you are configuring the COOP feature for GETVPN redundancy, which two steps are required to ensure the proper COOP operations between the key servers? (Choose two.)
Click on the arrows to vote for the correct answer
A. B. C. D. E.AB.
COOP (Cluster of One) is a redundancy feature that allows multiple key servers to operate as a single logical entity in a group encryption environment. It provides redundancy and failover capability to the Group Domain of Interpretation (GDOI) key servers. When configuring the COOP feature for GET VPN redundancy, there are two steps required to ensure proper COOP operations between the key servers:
A. Generate an exportable RSA key pair on the primary key server and export it to the secondary key server. The first step in configuring COOP for GET VPN redundancy is to generate an exportable RSA key pair on the primary key server and export it to the secondary key server. This is required to ensure that the secondary key server can take over the role of the primary key server in case of a failure. The exportable RSA key pair is used to establish trust between the primary and secondary key servers. It is important to note that the RSA key pair must be exportable to allow it to be transferred to the secondary key server.
D. Enable IPC between the primary and secondary key servers. The second step in configuring COOP for GET VPN redundancy is to enable IPC (Interprocess Communication) between the primary and secondary key servers. This is necessary to allow the key servers to exchange control and status information, such as the key server's current state, number of active peers, and other important information required for proper COOP operations. The IPC communication protocol used between the key servers must be reliable, fast, and secure to ensure proper failover and redundancy operations.
Therefore, options A and D are the correct answers. Option B is incorrect because dead peer detection is not a requirement for COOP operations. Option C is incorrect because HSRP (Hot Standby Router Protocol) is used for router redundancy and does not play a role in COOP operations. Option E is incorrect because NTP (Network Time Protocol) synchronization is not required for COOP operations but it is a good practice to have both key servers synchronized to the same clock source to avoid any issues related to clock skew.