As the network engineer of MDFT Pro, a well-known training agency, you manage an Azure virtual network named Vnet1 and an on-premises network. The on-premises network has policy-based VPN devices.
In Vnet1, you deploy a virtual network gateway named GW1 that uses a SKU of VpnGw1 and is route-based.
You have a Site-to-Site VPN connection for GW1 as shown in the following exhibit.
You need to ensure that the on-premises network can connect to the route-based GW1.
What should you do before you create the connection?
Set IPsec / IKE policy to Custom is correct. Setting a custom IPsec/IKE policy with Use policy based traffic selectors enabled allows a route-based gateway to interoperate with policy-based on-premises VPN devices.
Set Use Azure Private IP Address to Enabled is incorrect. Use Azure Private IP Address is for ExpressRoute private peering scenarios, not for policy-based VPN compatibility.
Set BGP to Enabled is incorrect. Enabling BGP adds dynamic routing but does not make a route-based gateway compatible with policy-based VPN devices.
Set Connection Mode to ResponderOnly is incorrect. ResponderOnly controls connection initiation direction but does not enable compatibility with policy-based devices.