FCSS_EFW_AD-7.6 · Question #12
An administrator is designing an ADVPN network for a large enterprise with spokes that have varying numbers of internet links. They want to avoid a high number of routes and peer connections at the…
The correct answer is C. Use a dynamic routing protocol using loopback interfaces to streamline peers and routes. When designing an ADVPN (Auto-Discovery VPN) network for a large enterprise with spokes that have varying numbers of internet links, the main challenge is to minimize the number of peer connections and routes at the hub while maintaining scalability and efficiency. Using a…
Question
An administrator is designing an ADVPN network for a large enterprise with spokes that have varying numbers of internet links. They want to avoid a high number of routes and peer connections at the hub. Which method should be used to simplify routing and peer management?
Options
- ADeploy a full-mesh VPN topology to eliminate hub dependency.
- BImplement static routing over IPsec interfaces for each spoke.
- CUse a dynamic routing protocol using loopback interfaces to streamline peers and routes.
- DEstablish a traditional hub-and-spoke VPN topology with policy routes.
How the community answered
(45 responses)- A9% (4)
- B2% (1)
- C84% (38)
- D4% (2)
Explanation
When designing an ADVPN (Auto-Discovery VPN) network for a large enterprise with spokes that have varying numbers of internet links, the main challenge is to minimize the number of peer connections and routes at the hub while maintaining scalability and efficiency. Using a dynamic routing protocol (such as BGP or OSPF) with loopback interfaces helps in - Reduces the number of peer connections at the hub by using a single loopback address per spoke instead of individual physical interfaces. - Enables simplified route advertisement by dynamically learning and propagating routes instead of manually configuring static routes. - Supports multiple internet links per spoke efficiently, as dynamic routing can automatically adjust to the best available path. - Allows seamless failover if a spoke's internet link fails, ensuring continuous connectivity.
Topics
Community Discussion
No community discussion yet for this question.