300-730 · Question #200
Which interface type must be used in an IKEv2 deployment that needs to route non-IP traffic?
The correct answer is C. GRE interface. GRE is required in IKEv2 deployments when non-IP traffic must be transported, because it encapsulates non-IP protocols inside IP packets before IPsec encryption.
Question
Options
- Avirtual tunnel interface
- Bdynamic virtual tunnel interface
- CGRE interface
- Dbridge virtual interface
How the community answered
(30 responses)- A17% (5)
- B3% (1)
- C73% (22)
- D7% (2)
Why each option
GRE is required in IKEv2 deployments when non-IP traffic must be transported, because it encapsulates non-IP protocols inside IP packets before IPsec encryption.
A static virtual tunnel interface only supports IP unicast traffic and cannot encapsulate or forward non-IP protocols.
A dynamic virtual tunnel interface supports dynamic peer creation but is still limited to IP traffic and cannot handle non-IP protocols.
GRE (Generic Routing Encapsulation) can encapsulate non-IP protocols such as IPX or multicast by wrapping them inside IP packets, making them transportable over an IKEv2/IPsec tunnel. Virtual tunnel interfaces natively support only IP unicast traffic, so GRE is the required interface type to carry non-IP payloads in an IKEv2 deployment.
A bridge virtual interface provides Layer 2 transparent bridging and is not a standard interface type used within IKEv2 tunnel deployments for non-IP routing.
Concept tested: GRE over IKEv2 for non-IP traffic encapsulation
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ikevpn/configuration/xe-16/sec-ike-v2-xe-16-book/configuring-ikev2-tunnel.html
Topics
Community Discussion
No community discussion yet for this question.