350-701 · Question #534
What is a benefit of using GET VPN over FlexVPN within a VPN deployment?
The correct answer is B. GET VPN natively supports MPLS and private IP networks. A benefit of using GET VPN over FlexVPN is its native support for MPLS and private IP networks, allowing for the preservation of IP headers and native routing.
Question
What is a benefit of using GET VPN over FlexVPN within a VPN deployment?
Options
- AGET VPN supports Remote Access VPNs
- BGET VPN natively supports MPLS and private IP networks
- CGET VPN uses multiple security associations for connections
- DGET VPN interoperates with non-Cisco devices
How the community answered
(26 responses)- A4% (1)
- B92% (24)
- C4% (1)
Why each option
A benefit of using GET VPN over FlexVPN is its native support for MPLS and private IP networks, allowing for the preservation of IP headers and native routing.
GET VPN is primarily used for site-to-site or group-to-group VPNs, not typically for remote access VPNs, where FlexVPN offers more versatile support.
Group Encrypted Transport VPN (GET VPN) is designed for securing group communication over private IP networks, such as MPLS, while preserving the original IP headers. This allows existing routing protocols and QoS policies to operate effectively over the encrypted network without building individual tunnels between every spoke.
GET VPN is characterized by using a single Security Association (SA) for the entire group, allowing it to leverage existing routing tables for forwarding encrypted traffic, unlike traditional IPsec that uses multiple SAs per tunnel.
GET VPN is a Cisco proprietary solution and does not natively interoperate with non-Cisco devices.
Concept tested: GET VPN vs FlexVPN features
Source: https://www.cisco.com/c/en/us/products/security/group-encrypted-transport-vpn/index.html
Topics
Community Discussion
No community discussion yet for this question.