nerdexam
Cisco

352-001 · Question #758

An IPsec VPN WAN network has a new requirement for passing multicast traffic between sites. Which two technologies must be added to the design to pass the multicast traffic? (Choose two)

The correct answer is B. GRE D. VTI. IPsec does not natively support multicast traffic, so GRE encapsulation combined with VTI-based IPsec tunnel interfaces must be added to transport multicast across the encrypted WAN.

Designing Network Services

Question

An IPsec VPN WAN network has a new requirement for passing multicast traffic between sites. Which two technologies must be added to the design to pass the multicast traffic? (Choose two)

Options

  • AIGMP
  • BGRE
  • CPIM dense mode
  • DVTI
  • EFast Switching

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    85% (22)
  • C
    4% (1)
  • E
    4% (1)

Why each option

IPsec does not natively support multicast traffic, so GRE encapsulation combined with VTI-based IPsec tunnel interfaces must be added to transport multicast across the encrypted WAN.

AIGMP

IGMP handles host group membership signaling on a local LAN segment and does not solve the problem of transporting multicast across an IPsec WAN tunnel.

BGRECorrect

GRE encapsulates multicast packets into unicast IP datagrams, allowing IPsec to process and encrypt them since IPsec itself only handles unicast traffic natively.

CPIM dense mode

PIM dense mode handles multicast distribution tree building but cannot by itself enable multicast to traverse an IPsec tunnel that lacks the encapsulation needed to carry multicast.

DVTICorrect

VTI (Virtual Tunnel Interface) provides a routable logical interface bound to an IPsec profile, enabling dynamic routing protocols and multicast to traverse the encrypted tunnel by treating the tunnel as a point-to-point interface.

EFast Switching

Fast Switching is a legacy Cisco packet-forwarding mechanism and has no role in enabling multicast transport over IPsec VPN tunnels.

Concept tested: Multicast transport over IPsec using GRE and VTI

Source: https://www.cisco.com/c/en/us/support/docs/ip/ip-multicast/118688-technote-mcast-00.html

Topics

#IPsec VPN#multicast#GRE#VTI

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice