300-730 · Question #5
Which VPN does VPN load balancing on the ASA support?
The correct answer is B. VTI. ASA VPN load balancing is supported only for VTI-based VPN configurations, not for all VPN types.
Question
Options
- ADVTI
- BVTI
- CDMVPN
- DGRE
How the community answered
(45 responses)- A7% (3)
- B89% (40)
- C2% (1)
- D2% (1)
Why each option
ASA VPN load balancing is supported only for VTI-based VPN configurations, not for all VPN types.
DVTI (Dynamic VTI) is a Cisco IOS router feature used in hub-and-spoke deployments and is not an ASA-supported VPN type for load balancing.
Cisco ASA VPN load balancing supports VTI (Virtual Tunnel Interface) based VPNs. VTI provides a routable interface for IPsec traffic, which integrates with the ASA load balancing cluster to distribute VPN sessions across cluster members. This is the only VPN tunnel type the ASA load balancing feature is designed to work with.
DMVPN is an IOS router-based solution that uses mGRE and NHRP and is not a VPN technology native to or load-balanced by the ASA.
GRE alone is a tunneling protocol, not a standalone VPN type supported by ASA VPN load balancing.
Concept tested: ASA VPN load balancing supported tunnel types
Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa916/configuration/vpn/asa-916-vpn-config/vpn-load-balancing.html
Topics
Community Discussion
No community discussion yet for this question.