300-420 Question 51
Single answerA network architect is designing a multi-site enterprise network with the requirement to securely connect branch offices to the headquarters and other branches over the public internet. The solution must support scalability, reduce the configuration complexity of traditional point-to-point tunnels, and allow for simplified policy enforcement. Which overlay technology would best meet these requirements?
- A
Generic Routing Encapsulation (GRE)
- B
Dynamic Multipoint VPN (DMVPN)
- C
Virtual Extensible LAN (VXLAN)
- D
Cisco SD-WAN
Show answer and explanation
Correct answer: D
Explanation
Cisco SD-WAN is the most appropriate solution for connecting multiple branch offices to the headquarters over the public internet. It supports scalability, centralized policy management, and reduced configuration complexity, which are critical requirements in this scenario. Traditional tunneling methods like GRE or DMVPN do not provide the same level of flexibility, simplicity, and advanced features as Cisco SD-WAN.
- A. Incorrect.
GRE provides basic tunnel encapsulation but does not inherently support scalability or simplified policy enforcement without additional protocols. It would increase configuration complexity in a multi-site environment.
- B. Incorrect.
DMVPN is a viable solution for creating scalable and dynamic tunnels, but it lacks the advanced capabilities of modern SD-WAN solutions, such as centralized management and application-aware routing.
- C. Incorrect.
VXLAN is used for Layer 2 overlays in data center environments and is not a suitable solution for multi-site enterprise connectivity over the public internet.
- D. Correct.
Cisco SD-WAN is designed to meet the requirements of scalability, centralized policy management, simplified configuration, and secure connectivity over public or private networks. It also includes advanced features like application-aware routing, making it the best fit for the scenario.