When is an IPSec SA built on the Teleworker Router?（）

• A、when the router is booted up
• B、when the router administratively does a no shutdown" on the IPSec SA 
• C、when traffic matches a line of the access-list tied into the crypto-map in the router configuration, and that particular IPSec SA is not already up 
• D、when the ISAKMP SA completes negotiation of all IPSec SAs (one per access-list line in the crypto ACL), it will be brought up immediately