300-320 · Question #590
What VPN solution for hub & spoke, spoke are talking to each other dynamically, easy encryption key change, no changes in header?
The correct answer is B. DMVPN. DMVPN (Dynamic Multipoint VPN) is the correct choice. It uses mGRE and NHRP to allow spokes to dynamically discover each other and build on-demand spoke-to-spoke tunnels without hub reconfiguration. IKE handles encryption key management, making key changes straightforward. The…
Question
What VPN solution for hub & spoke, spoke are talking to each other dynamically, easy encryption key change, no changes in header?
Options
- AGETVPN
- BDMVPN
How the community answered
(28 responses)- A25% (7)
- B75% (21)
Explanation
DMVPN (Dynamic Multipoint VPN) is the correct choice. It uses mGRE and NHRP to allow spokes to dynamically discover each other and build on-demand spoke-to-spoke tunnels without hub reconfiguration. IKE handles encryption key management, making key changes straightforward. The original IP packet headers are not modified - they are encapsulated inside GRE. GETVPN (Option A) is a tunnelless solution better suited for full-mesh private WAN environments (like MPLS) and does not support dynamic spoke-to-spoke tunnels in a hub-and-spoke model.
Topics
Community Discussion
No community discussion yet for this question.