300-730 · Question #89
Which VPN technology must be used to ensure that routers are able to dynamically form connections with each other rather than sending traffic through a hub and be able to advertise routes without…
The correct answer is D. GETVPN. GETVPN enables any-to-any encrypted communication without a hub by leveraging the existing MPLS routing infrastructure, eliminating the need for a dynamic routing protocol overlay.
Question
Options
- AFlexVPN
- BDMVPN Phase 3
- CDMVPN Phase 2
- DGETVPN
How the community answered
(14 responses)- B7% (1)
- C7% (1)
- D86% (12)
Why each option
GETVPN enables any-to-any encrypted communication without a hub by leveraging the existing MPLS routing infrastructure, eliminating the need for a dynamic routing protocol overlay.
FlexVPN supports dynamic VPN topologies but still requires a dynamic routing protocol such as BGP or EIGRP to advertise routes between peers.
DMVPN Phase 3 uses NHRP shortcut switching to enable spoke-to-spoke tunnels but still requires a dynamic routing protocol for route advertisement between spokes.
DMVPN Phase 2 allows direct spoke-to-spoke tunnels but spokes must receive routing information via a hub running a dynamic routing protocol, failing the no-routing-protocol requirement.
GETVPN operates as a non-tunneled, group-based VPN where all group members share encryption keys provisioned by a Key Server, allowing direct encrypted communication between any two sites without traversing a hub. Because GETVPN preserves the original IP header and relies on the underlying MPLS network for routing, no additional dynamic routing protocol is required on the VPN overlay. This makes GETVPN the only option that satisfies both the any-to-any direct connectivity and the no-routing-protocol requirements simultaneously.
Concept tested: GETVPN any-to-any VPN without dynamic routing protocol
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-16/sec-get-vpn-xe-16-book.html
Topics
Community Discussion
No community discussion yet for this question.