352-001 · Question #674
A service provider hires you to design its new managed CE offering to meet these requirements: - The CEs cannot run a routing protocol with the PE - Provide the ability for equal or unequal ingress lo
The correct answer is D. DMVPN. DMVPN satisfies all stated requirements - no CE-PE routing protocol, dynamic load balancing, IPv6 support, massive scale, low operational overhead, and compatibility with inexpensive CE hardware.
Question
A service provider hires you to design its new managed CE offering to meet these requirements:
- The CEs cannot run a routing protocol with the PE
- Provide the ability for equal or unequal ingress load balancing in dual-homed CE scenarios
- Provide support for IPv6 customer routes
- Scale up to 250,000 CE devices per customer
- Provide low operational management to scale customer growth
- Utilize low-end (inexpensive) routing platforms for CE functionality
Which tunneling technology do you recommend?
Options
- ALISP
- Bpoint-to-point GRE
- CFlexVPN
- DDMVPN
How the community answered
(39 responses)- A10% (4)
- B5% (2)
- C21% (8)
- D64% (25)
Why each option
DMVPN satisfies all stated requirements - no CE-PE routing protocol, dynamic load balancing, IPv6 support, massive scale, low operational overhead, and compatibility with inexpensive CE hardware.
LISP is designed for endpoint mobility and multihoming scenarios but does not provide the tunneling scalability or the ingress load-balancing flexibility required for 250,000 managed CEs.
Point-to-point GRE requires a static tunnel per CE site, creating enormous operational complexity and failing to scale to 250,000 devices without significant manual configuration overhead.
FlexVPN provides flexible IKEv2-based VPN connectivity but typically requires more capable hardware and complex configuration, increasing both cost and operational management burden at scale.
DMVPN uses NHRP for dynamic tunnel establishment so CE devices do not need to run a routing protocol directly with the PE, and it supports both equal and unequal load balancing when paired with EIGRP or other protocols. It scales to hundreds of thousands of spoke sites, natively supports IPv6, and operates effectively on low-cost CE platforms, satisfying every requirement listed for the managed CE offering.
Concept tested: DMVPN design for scalable managed CE deployment
Source: https://www.cisco.com/c/en/us/products/ios-nx-os-software/dynamic-multipoint-vpn-dmvpn/index.html
Topics
Community Discussion
No community discussion yet for this question.