300-415 Question 36
Select 2You are designing a Cisco SD-WAN solution for a customer. The customer requires secure communication between branch sites and the data center, but also needs to support multicast traffic for video conferencing. Which combination of tunneling protocols would best meet these requirements?
- A
Use IPsec for secure communication and GRE for multicast traffic encapsulation.
- B
Use GRE only, as it supports both secure communication and multicast traffic.
- C
Use IPsec only, as it inherently supports secure communication and multicast traffic.
- D
Use IPsec for secure communication and configure GRE over IPsec to support multicast traffic.
- E
Use GRE for secure communication and IPsec for multicast traffic.
Show answer and explanation
Correct answers: A, D
Explanation
In SD-WAN solutions, IPsec is used to provide secure communication by encrypting data between endpoints. However, IPsec does not natively support multicast traffic. To address this, GRE is used to encapsulate multicast traffic, and then the GRE tunnel can be secured using IPsec. This combination ensures both secure communication and support for multicast traffic, which is essential for applications like video conferencing.
- A. Correct.
Correct: IPsec provides encryption for secure communication, and GRE can encapsulate multicast traffic since IPsec does not natively support multicast.
- B. Incorrect.
Incorrect: GRE by itself does not provide encryption or secure communication; it only handles encapsulation, including multicast traffic.
- C. Incorrect.
Incorrect: IPsec does not inherently support multicast traffic. Additional configurations, such as GRE over IPsec, are needed for multicast support.
- D. Correct.
Correct: Combining IPsec for secure communication and GRE over IPsec allows multicast traffic to be encapsulated and transmitted securely.
- E. Incorrect.
Incorrect: GRE does not provide encryption, so it cannot be used for secure communication, and IPsec does not directly handle multicast traffic without GRE encapsulation.