300-415 Question 33
Single answerA network engineer is configuring a Cisco SD-WAN overlay network. The engineer needs to establish secure communication between vEdge devices, but also wants to encapsulate non-IP traffic across the WAN. Which option should the engineer configure to meet these requirements?
- A
Use IPsec for encryption and GRE for encapsulation.
- B
Use GRE with encryption enabled for secure encapsulation.
- C
Use IPsec for both encryption and encapsulation.
- D
Use GRE without encryption for encapsulation.
Show answer and explanation
Correct answer: A
Explanation
To meet the requirement of secure communication and encapsulation of non-IP traffic in an SD-WAN environment, the best approach is to use IPsec for encryption and GRE for encapsulation. IPsec ensures the data is secure, while GRE allows for encapsulation of protocols beyond standard IP traffic. This combination is commonly used in SD-WAN deployments to support diverse traffic types securely.
- A. Correct.
Correct. IPsec can be used for encryption to secure the data, while GRE is used for encapsulation to support non-IP traffic. This combination meets both requirements.
- B. Incorrect.
Incorrect. GRE alone does not provide sufficient encryption. Encryption must be handled by a protocol like IPsec to ensure secure communication.
- C. Incorrect.
Incorrect. IPsec does not support encapsulation of non-IP traffic. It is primarily used for securing IP-based data flows.
- D. Incorrect.
Incorrect. GRE without encryption does not provide a secure communication channel, as the data is transmitted in clear text.