352-001 · Question #758
An IPsec VPN WAN network has a new requirement for passing multicast traffic between sites. Which two technologies must be added to the design to pass the multicast traffic? (Choose two)
The correct answer is B. GRE D. VTI. IPsec does not natively support multicast traffic, so GRE encapsulation combined with VTI-based IPsec tunnel interfaces must be added to transport multicast across the encrypted WAN.
Question
An IPsec VPN WAN network has a new requirement for passing multicast traffic between sites. Which two technologies must be added to the design to pass the multicast traffic? (Choose two)
Options
- AIGMP
- BGRE
- CPIM dense mode
- DVTI
- EFast Switching
How the community answered
(26 responses)- A8% (2)
- B85% (22)
- C4% (1)
- E4% (1)
Why each option
IPsec does not natively support multicast traffic, so GRE encapsulation combined with VTI-based IPsec tunnel interfaces must be added to transport multicast across the encrypted WAN.
IGMP handles host group membership signaling on a local LAN segment and does not solve the problem of transporting multicast across an IPsec WAN tunnel.
GRE encapsulates multicast packets into unicast IP datagrams, allowing IPsec to process and encrypt them since IPsec itself only handles unicast traffic natively.
PIM dense mode handles multicast distribution tree building but cannot by itself enable multicast to traverse an IPsec tunnel that lacks the encapsulation needed to carry multicast.
VTI (Virtual Tunnel Interface) provides a routable logical interface bound to an IPsec profile, enabling dynamic routing protocols and multicast to traverse the encrypted tunnel by treating the tunnel as a point-to-point interface.
Fast Switching is a legacy Cisco packet-forwarding mechanism and has no role in enabling multicast transport over IPsec VPN tunnels.
Concept tested: Multicast transport over IPsec using GRE and VTI
Source: https://www.cisco.com/c/en/us/support/docs/ip/ip-multicast/118688-technote-mcast-00.html
Topics
Community Discussion
No community discussion yet for this question.