350-401 Question 512
Single answerA network engineer is tasked with deploying a secure, scalable GRE-based solution to interconnect multiple branch offices with a central data center. The solution must allow dynamic addition of new branch offices without requiring reconfiguration of the existing tunnels. Which technology should the engineer implement?
- A
Point-to-Point GRE Tunnels
- B
Multipoint GRE (mGRE)
- C
IPsec over Point-to-Point GRE
- D
VTI (Virtual Tunnel Interface)
Show answer and explanation
Correct answer: B
Explanation
Multipoint GRE (mGRE) is designed for scalable and flexible interconnectivity in hub-and-spoke or full-mesh topologies. It eliminates the need for manually configuring point-to-point GRE tunnels for each new branch, instead allowing dynamic establishment of tunnels as needed. This is ideal for scenarios where branch offices need to be added without extensive reconfiguration.
- A. Incorrect.
Point-to-Point GRE is not scalable for large networks with multiple branch offices because each new branch would require its own dedicated tunnel to every other location, leading to significant configuration overhead.
- B. Correct.
Multipoint GRE (mGRE) is the correct solution because it allows the creation of a single GRE tunnel interface that can dynamically establish connections to multiple endpoints. This makes it highly scalable and suitable for scenarios where new branches can be added without reconfiguring existing tunnels.
- C. Incorrect.
IPsec over Point-to-Point GRE provides security for GRE tunnels, but it does not address the scalability issue. It still requires individual tunnels for each branch-to-branch or branch-to-data-center connection.
- D. Incorrect.
VTI simplifies IPsec deployments but does not inherently support the dynamic, scalable nature of mGRE for interconnecting multiple locations.