You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?

The correct answer is B. Update the SD-WAN configuration on the branches. ADVPN-2.0 is implemented by changing how SD-WAN selects/creates dynamic VPNs between sites (it uses the SD-WAN/ADVPN settings so spokes can form direct child tunnels). If your topology already has ADVPN (legacy) IPsec tunnels in place, you normally do not need to rip…

Advanced SD-WAN Features

Question

Options

AUpdate the IPsec tunnel configurations on the hub.
BUpdate the SD-WAN configuration on the branches.
CUpdate the IPsec tunnel configuration on the branches.
DDelete the existing ADVPN configuration and configure ADVPN 2.0.

How the community answered

(26 responses)

A
4% (1)
B
69% (18)
C
8% (2)
D
19% (5)

Explanation

ADVPN-2.0 is implemented by changing how SD-WAN selects/creates dynamic VPNs between sites (it uses the SD-WAN/ADVPN settings so spokes can form direct child tunnels). If your topology already has ADVPN (legacy) IPsec tunnels in place, you normally do not need to rip- and-replace existing IPsec tunnel definitions on hub or spokes - instead you enable and adjust the ADVPN-2.0-related settings in the SD-WAN configuration on the branch devices so they will negotiate and use the ADVPN-2.0 behavior.

Topics

#ADVPN 2.0#VPN upgrade#branch configuration#hub-and-spoke

Community Discussion

No community discussion yet for this question.

Full NSE6_SDW_AD-7.6 Practice