300-420 · Question #201
Refer to the exhibit. A customer wants to adopt a dynamic site-to-site VPN solution to secure communication for VoIP, video, and FTP traffic between the remote branches and the headquarters. The…
The correct answer is B. DMVPN Phase 3 Hub and Spoke design. DMVPN Phase 3 Hub and Spoke is the best solution as it allows dynamic spoke-to-spoke tunnels and uses NHRP redirects to minimize routing table size on spokes, satisfying all requirements.
Question
Refer to the exhibit. A customer wants to adopt a dynamic site-to-site VPN solution to secure communication for VoIP, video, and FTP traffic between the remote branches and the headquarters. The customer also wants the branches to communicate directly, thereby reducing traffic at the headquarters location. The solution most consider that the branch routers are limited in available memory. Which VPN solution meets these requirements?
Exhibit
Options
- ADMVPN Phase 2 Hub and Spoke design
- BDMVPN Phase 3 Hub and Spoke design
- CDMVPN Phase 3 Hierarchical design
- DDMVPN Phase 1 Hub and Spoke design
How the community answered
(28 responses)- A4% (1)
- B82% (23)
- C4% (1)
- D11% (3)
Why each option
DMVPN Phase 3 Hub and Spoke is the best solution as it allows dynamic spoke-to-spoke tunnels and uses NHRP redirects to minimize routing table size on spokes, satisfying all requirements.
DMVPN Phase 2 Hub and Spoke design allows direct spoke-to-spoke tunnels but requires spokes to learn all remote spoke routes, which can consume significant memory on branch routers and is not suitable for memory-limited devices.
DMVPN Phase 3 Hub and Spoke design allows spokes to establish direct spoke-to-spoke tunnels dynamically without intervention from the hub, fulfilling the direct communication requirement and reducing hub traffic. It also uses NHRP redirects, meaning spokes do not need to learn all remote spoke routes, thus conserving memory on resource-constrained branch routers.
DMVPN Phase 3 Hierarchical design introduces more complexity and potentially more overhead for branch routers, which contradicts the requirement for limited memory devices.
DMVPN Phase 1 Hub and Spoke design forces all spoke-to-spoke traffic to pass through the hub, which does not meet the requirement for direct branch communication and increased hub traffic.
Concept tested: DMVPN phases and features
Source: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Branch/DMVPN/DMVPN_Phase3.html
Topics
Community Discussion
No community discussion yet for this question.
