2V0-41.24 Question 192
Select 4An organization is deploying an IPSec VPN between two NSX-T Data Center environments. The administrators must choose between policy-based and route-based IPSec VPNs. Which considerations are accurate when deciding between these two VPN types?
- A
Policy-based IPSec VPNs are simpler to configure and are suitable for environments with static traffic patterns.
- B
Route-based IPSec VPNs utilize tunnel interfaces and support dynamic routing protocols like BGP and OSPF.
- C
Policy-based IPSec VPNs support dynamic routing protocols, making them ideal for complex network designs.
- D
Route-based IPSec VPNs are more flexible and can support multiple traffic flows through a single tunnel interface.
- E
Policy-based IPSec VPNs use Access Control Lists (ACLs) to define traffic that should be encrypted.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
When deciding between policy-based and route-based IPSec VPNs, it is important to understand their use cases and operational differences. Policy-based VPNs are simpler and suitable for static traffic patterns, while route-based VPNs offer flexibility by using tunnel interfaces and supporting dynamic routing protocols. Policy-based VPNs use ACLs for traffic selection, whereas route-based VPNs are more versatile for complex scenarios. By understanding these distinctions, administrators can choose the appropriate VPN type for their environment.
- A. Correct.
Policy-based IPSec VPNs are indeed simpler to configure and are a good choice for environments with predictable, static traffic flows. This is a correct statement.
- B. Correct.
Route-based IPSec VPNs use virtual tunnel interfaces and are designed to support dynamic routing protocols like BGP and OSPF, which makes them suitable for more complex network scenarios. This is a correct statement.
- C. Incorrect.
Policy-based IPSec VPNs do not support dynamic routing protocols. Instead, they rely on static configurations using ACLs. This statement is incorrect.
- D. Correct.
Route-based IPSec VPNs allow multiple traffic flows to be routed through a single tunnel interface, providing greater flexibility compared to policy-based IPSec VPNs. This is a correct statement.
- E. Correct.
Policy-based IPSec VPNs use ACLs to define the traffic that is permitted and encrypted within the VPN. This is a correct statement.