300-320 · Question #270
Which VPN technology supports dynamic creation of spoke-to-spoke VPN tunnels to provide a scalable design?
The correct answer is C. DMVPN. DMVPN (Dynamic Multipoint VPN) enables scalable hub-and-spoke VPN designs by allowing spokes to dynamically build direct spoke-to-spoke tunnels on demand using NHRP.
Question
Which VPN technology supports dynamic creation of spoke-to-spoke VPN tunnels to provide a scalable design?
Options
- AIPsec
- BGRE over IPsec
- CDMVPN
- DGRE
How the community answered
(44 responses)- A2% (1)
- B5% (2)
- C91% (40)
- D2% (1)
Why each option
DMVPN (Dynamic Multipoint VPN) enables scalable hub-and-spoke VPN designs by allowing spokes to dynamically build direct spoke-to-spoke tunnels on demand using NHRP.
Standard IPsec requires statically defined crypto map peer configurations for each tunnel endpoint, providing no mechanism for dynamic spoke-to-spoke tunnel creation.
GRE over IPsec creates static point-to-point tunnels between explicitly configured endpoints and does not support dynamic spoke-to-spoke tunnel establishment.
DMVPN uses a combination of mGRE (multipoint GRE), NHRP (Next Hop Resolution Protocol), and IPsec to allow spoke routers to register their public IP addresses with a hub and then dynamically build direct encrypted tunnels to other spokes without pre-configuring each tunnel, making it highly scalable.
Plain GRE provides tunneling without encryption and requires static point-to-point configurations with no dynamic spoke-to-spoke capability.
Concept tested: DMVPN dynamic spoke-to-spoke tunnel creation using NHRP
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-16/sec-conn-dmvpn-xe-16-book.html
Topics
Community Discussion
No community discussion yet for this question.