nerdexam
Cisco

352-001 · Question #674

A service provider hires you to design its new managed CE offering to meet these requirements: - The CEs cannot run a routing protocol with the PE - Provide the ability for equal or unequal ingress lo

The correct answer is D. DMVPN. DMVPN satisfies all stated requirements - no CE-PE routing protocol, dynamic load balancing, IPv6 support, massive scale, low operational overhead, and compatibility with inexpensive CE hardware.

Designing Network Services

Question

A service provider hires you to design its new managed CE offering to meet these requirements:

  • The CEs cannot run a routing protocol with the PE
  • Provide the ability for equal or unequal ingress load balancing in dual-homed CE scenarios
  • Provide support for IPv6 customer routes
  • Scale up to 250,000 CE devices per customer
  • Provide low operational management to scale customer growth
  • Utilize low-end (inexpensive) routing platforms for CE functionality

Which tunneling technology do you recommend?

Options

  • ALISP
  • Bpoint-to-point GRE
  • CFlexVPN
  • DDMVPN

How the community answered

(39 responses)
  • A
    10% (4)
  • B
    5% (2)
  • C
    21% (8)
  • D
    64% (25)

Why each option

DMVPN satisfies all stated requirements - no CE-PE routing protocol, dynamic load balancing, IPv6 support, massive scale, low operational overhead, and compatibility with inexpensive CE hardware.

ALISP

LISP is designed for endpoint mobility and multihoming scenarios but does not provide the tunneling scalability or the ingress load-balancing flexibility required for 250,000 managed CEs.

Bpoint-to-point GRE

Point-to-point GRE requires a static tunnel per CE site, creating enormous operational complexity and failing to scale to 250,000 devices without significant manual configuration overhead.

CFlexVPN

FlexVPN provides flexible IKEv2-based VPN connectivity but typically requires more capable hardware and complex configuration, increasing both cost and operational management burden at scale.

DDMVPNCorrect

DMVPN uses NHRP for dynamic tunnel establishment so CE devices do not need to run a routing protocol directly with the PE, and it supports both equal and unequal load balancing when paired with EIGRP or other protocols. It scales to hundreds of thousands of spoke sites, natively supports IPv6, and operates effectively on low-cost CE platforms, satisfying every requirement listed for the managed CE offering.

Concept tested: DMVPN design for scalable managed CE deployment

Source: https://www.cisco.com/c/en/us/products/ios-nx-os-software/dynamic-multipoint-vpn-dmvpn/index.html

Topics

#DMVPN#managed CE#service provider design#tunneling technology

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice