What is a characteristic of GET VPN?

GET VPN uses the Group Domain of Interpretation (GDOI) protocol and encrypts traffic while keeping the original source and destination IP headers intact, eliminating the overhead of tunnel encapsulation. This tunnel-less approach allows it to work seamlessly over MPLS WANs where routing is based on original IP addresses, distinguishing it from traditional tunnel-mode VPNs.

GET VPN uses a group keying model where all members share keys distributed by a Key Server, not individual peer-to-peer security associations.

Hub-and-spoke describes DMVPN topology; GET VPN supports any-to-any encrypted communication among all group members without requiring a central hub.

GET VPN is specifically tunnel-less - it does not create new IP tunnel headers and instead encrypts the original payload while preserving the original IP addressing.