Refer to the exhibit. The WAN network of the General Bank of Greece has experienced several outages. It takes too long to activate a new branch site. The networking department of the bank plans to…

DMVPN over L3VPN uses the bank's existing MPLS L3VPN underlay while adding a dynamic multipoint tunnel overlay that the internal team manages directly, satisfying the in-house requirement. DMVPN's dynamic spoke-to-spoke tunnel creation accelerates new branch activation without requiring static tunnel provisioning for each site. Because it uses standard IOS features without additional controller licensing, it aligns with the CTO's OPEX reduction goal better than SD-WAN alternatives.

Managed SD-WAN is operated by a third-party provider, which directly contradicts the requirement for an in-house solution and may increase recurring OPEX.

SD-WAN over L3VPN requires additional controller licensing costs (vManage, vBond, vSmart or equivalent) that increase OPEX compared to DMVPN using standard IOS capabilities.

SD-WAN over L2VPN introduces unnecessary Layer 2 complexity at scale and is less operationally efficient for a large, rapidly growing branch network.