300-420 · Question #154
A global organization with several branches hired a network architect to design an overlay VPN solution. The branches communicate with each other frequently. The customer expects to add more…
The correct answer is A. DMVPN. The architect needs an overlay VPN solution that supports dynamic IPsec tunnels, frequent branch-to-branch communication, and is scalable for future branch additions.
Question
A global organization with several branches hired a network architect to design an overlay VPN solution. The branches communicate with each other frequently. The customer expects to add more branches in the future. To meet the customer's security requirements, the architect plans to provide traffic protection using dynamic IPsec tunnels. Which solution should the architect choose?
Options
- ADMVPN
- BEasyVPN
- CGETVPN
- DL2TP
How the community answered
(29 responses)- A76% (22)
- B14% (4)
- C7% (2)
- D3% (1)
Why each option
The architect needs an overlay VPN solution that supports dynamic IPsec tunnels, frequent branch-to-branch communication, and is scalable for future branch additions.
DMVPN (Dynamic Multipoint VPN) is designed for scalable hub-and-spoke and spoke-to-spoke IPsec VPNs, allowing branches to dynamically establish secure tunnels directly with each other. This setup minimizes latency by avoiding the hub for inter-branch traffic and supports easy expansion by adding new spokes without reconfiguring existing ones.
EasyVPN is primarily a client-to-gateway solution or for simpler hub-and-spoke designs and does not provide dynamic spoke-to-spoke IPsec tunneling for frequent inter-branch communication.
GETVPN (Group Encrypted Transport VPN) provides secure group communication for traffic flowing between members of a trusted group but does not dynamically establish on-demand spoke-to-spoke IPsec tunnels for direct communication.
L2TP (Layer 2 Tunneling Protocol) is a tunneling protocol that does not inherently provide IPsec encryption or the dynamic multipoint capabilities required for direct spoke-to-spoke communication.
Concept tested: Dynamic Multipoint VPN (DMVPN)
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-16/sec-conn-dmvpn-xe-16-book.html
Topics
Community Discussion
No community discussion yet for this question.