300-420 Question 183
Single answerAn organization is planning to implement a site-to-site VPN to securely connect its on-premises data center with a cloud service provider. The organization requires high availability, support for dynamic routing, and minimal manual configuration. Which VPN design option best addresses these requirements?
- A
Static IPSec VPN with manual keying
- B
Dynamic Multipoint VPN (DMVPN)
- C
Policy-Based VPN using route maps
- D
Point-to-Point GRE over IPSec tunnels
Show answer and explanation
Correct answer: B
Explanation
DMVPN is a scalable and flexible VPN solution that supports dynamic routing protocols, high availability, and reduced manual configuration through its use of a hub-and-spoke topology. It is ideal for connecting an on-premises data center with a cloud service provider in scenarios requiring these features. Other options either lack dynamic routing, require more manual intervention, or do not provide sufficient scalability.
- A. Incorrect.
Static IPSec VPN with manual keying does not support dynamic routing and requires significant manual configuration, making it unsuitable for the given requirements.
- B. Correct.
Dynamic Multipoint VPN (DMVPN) supports high availability, dynamic routing via protocols like EIGRP or BGP, and reduces manual configuration through its hub-and-spoke design, making it the best option for the scenario.
- C. Incorrect.
Policy-Based VPN using route maps does not inherently address high availability or dynamic routing. It is more useful for selective traffic filtering, which is not the primary requirement here.
- D. Incorrect.
Point-to-Point GRE over IPSec tunnels can support dynamic routing but lacks the scalability and reduced manual configuration features of DMVPN, making it a less suitable choice.