300-320 · Question #714
A network engineer must design a full mesh overlay VPN network. The proposed setup must be scalable, support multicast services, and be suitable for deployment over public internet. Which overlay…
The correct answer is B. DMVPN. DMVPN (Dynamic Multipoint VPN) is the correct choice because it satisfies all three requirements: it scales to full mesh topologies using NHRP (Next Hop Resolution Protocol) to dynamically build spoke-to-spoke tunnels without pre-configuring every peer; it supports multicast…
Question
A network engineer must design a full mesh overlay VPN network. The proposed setup must be scalable, support multicast services, and be suitable for deployment over public internet. Which overlay VPN technology must be used?
Options
- AGETVPN
- BDMVPN
- CGRE
- DIPsec
How the community answered
(47 responses)- A4% (2)
- B72% (34)
- C17% (8)
- D6% (3)
Explanation
DMVPN (Dynamic Multipoint VPN) is the correct choice because it satisfies all three requirements: it scales to full mesh topologies using NHRP (Next Hop Resolution Protocol) to dynamically build spoke-to-spoke tunnels without pre-configuring every peer; it supports multicast traffic natively through GRE tunnels; and it operates over the public internet. GETVPN (A) requires a private MPLS or trusted WAN backbone and cannot traverse the public internet. Plain GRE (C) is a point-to-point tunnel technology that is not scalable for full mesh without DMVPN. IPsec (D) alone does not support multicast and is not a complete overlay VPN architecture on its own.
Topics
Community Discussion
No community discussion yet for this question.