300-420 Question 50
Single answerAn enterprise is deploying a new SD-WAN solution for its branch offices. The network design uses an overlay network to provide secure communication over the public internet. Which tunneling protocol would be most appropriate to ensure end-to-end encryption while supporting scalability and ease of management?
- A
GRE
- B
IPsec
- C
VXLAN
- D
DMVPN
Show answer and explanation
Correct answer: B
Explanation
IPsec is the most appropriate tunneling protocol for secure communication in an SD-WAN overlay network. It provides encryption, authentication, and data integrity, ensuring secure end-to-end connectivity over the public internet. Additionally, its integration with SD-WAN controllers simplifies management and allows for scalability in enterprise networks. Other protocols like GRE and VXLAN lack native encryption, while DMVPN, though scalable, is less commonly used in SD-WAN solutions compared to IPsec.
- A. Incorrect.
GRE (Generic Routing Encapsulation) is a tunneling protocol that encapsulates various network layer protocols. However, it does not natively include encryption, making it unsuitable for secure communication over the public internet.
- B. Correct.
IPsec (Internet Protocol Security) provides strong encryption, authentication, and integrity for secure communication. It is commonly used for secure overlays in SD-WAN solutions and supports scalability and ease of management when integrated with SD-WAN controllers.
- C. Incorrect.
VXLAN (Virtual Extensible LAN) is used to create Layer 2 overlays over Layer 3 networks, primarily in data center environments. It is not typically used for secure communication over the public internet in SD-WAN deployments.
- D. Incorrect.
DMVPN (Dynamic Multipoint Virtual Private Network) is a Cisco solution that provides dynamic tunneling but relies on IPsec for encryption. While it supports scalability, it is not as commonly used in modern SD-WAN-specific designs compared to pure IPsec overlays.