In a point-to-multipoint scenario, and the headquarters address is fixed and the branch address is not fixed, it is recommended to use IPSec policy template method to establish VPN.

Question

Options

• ATrue
• BFalse

• A
  73% (43)
• B
  27% (16)

Explanation

Option A is correct because IPSec policy templates (also called "policy templates" or "responder-mode templates") are specifically designed for point-to-multipoint scenarios where the central site (headquarters) has a static IP but remote branches have dynamic IPs. The template allows the headquarters to accept incoming VPN connections from any branch without pre-configuring a specific peer IP address for each one.

Option B is wrong because rejecting this statement would imply a standard IPSec policy (with a fixed peer IP on both ends) is sufficient - but that breaks down the moment branch offices use DHCP or PPPoE addresses that change, since standard policies require knowing the peer's address in advance.

Memory tip: Think of a "template" like a hotel check-in form - headquarters keeps the same address (the hotel), while branches (guests) can come from anywhere with different IDs. The template handles whoever shows up, rather than reserving a room for a specific known guest.

No community discussion yet for this question.