An engineer must design a VPN solution for a company that has multiple branches connecting to a main office. What are two advantages of using DMVPN instead of IPsec tunnels to accomplish this task?…

Question

Options

• Asupport for AES 256-bit encryption
• Bgreater scalability
• Csupport for anycast gateway
• Dlower traffic overhead
• Edynamic spoke-to-spoke tunnels

• A
  2% (1)
• B
  92% (44)
• C
  2% (1)
• D
  4% (2)

Explanation

DMVPN offers two key advantages over traditional point-to-point IPsec tunnels. First, greater scalability (B): with traditional IPsec, every spoke-to-hub tunnel must be statically configured on both ends. DMVPN uses NHRP and mGRE so new spokes can be added without reconfiguring the hub, making it far more scalable for large branch deployments. Second, dynamic spoke-to-spoke tunnels (E): in DMVPN Phase 2 and Phase 3, spokes can establish direct tunnels to each other on demand using NHRP to resolve physical IP addresses, eliminating the need to backhaul spoke-to-spoke traffic through the hub. AES-256 encryption (A) is supported equally by both DMVPN and traditional IPsec. Anycast gateway (C) is a feature associated with VXLAN/EVPN fabrics. Lower traffic overhead (D) is incorrect because DMVPN uses GRE encapsulation, which adds overhead.

No community discussion yet for this question.