nerdexam
Cisco

300-320 · Question #714

A network engineer must design a full mesh overlay VPN network. The proposed setup must be scalable, support multicast services, and be suitable for deployment over public internet. Which overlay…

The correct answer is B. DMVPN. DMVPN (Dynamic Multipoint VPN) is the correct choice because it satisfies all three requirements: it scales to full mesh topologies using NHRP (Next Hop Resolution Protocol) to dynamically build spoke-to-spoke tunnels without pre-configuring every peer; it supports multicast…

Advanced WAN Services

Question

A network engineer must design a full mesh overlay VPN network. The proposed setup must be scalable, support multicast services, and be suitable for deployment over public internet. Which overlay VPN technology must be used?

Options

  • AGETVPN
  • BDMVPN
  • CGRE
  • DIPsec

How the community answered

(47 responses)
  • A
    4% (2)
  • B
    72% (34)
  • C
    17% (8)
  • D
    6% (3)

Explanation

DMVPN (Dynamic Multipoint VPN) is the correct choice because it satisfies all three requirements: it scales to full mesh topologies using NHRP (Next Hop Resolution Protocol) to dynamically build spoke-to-spoke tunnels without pre-configuring every peer; it supports multicast traffic natively through GRE tunnels; and it operates over the public internet. GETVPN (A) requires a private MPLS or trusted WAN backbone and cannot traverse the public internet. Plain GRE (C) is a point-to-point tunnel technology that is not scalable for full mesh without DMVPN. IPsec (D) alone does not support multicast and is not a complete overlay VPN architecture on its own.

Topics

#DMVPN#overlay VPN#multicast#scalability

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice