2V0-41.24 Question 194
Select 2You are configuring an IPSec VPN between two data centers using VMware NSX. One of the data centers has a specific requirement to allow traffic selection based on policies such as source and destination IP addresses, while the other relies on routing tables for traffic decisions. Which configuration approach should you use for each data center?
- A
Use a policy-based IPSec VPN for the data center requiring traffic selection based on policies.
- B
Use a route-based IPSec VPN for the data center requiring traffic selection based on policies.
- C
Use a route-based IPSec VPN for the data center that relies on routing tables for traffic decisions.
- D
Use a policy-based IPSec VPN for the data center that relies on routing tables for traffic decisions.
Show answer and explanation
Correct answers: A, C
Explanation
Policy-based IPSec VPNs use security policies to define which traffic is encrypted and sent through the tunnel, making them suitable for environments requiring granular traffic selection based on source and destination IPs. In contrast, route-based IPSec VPNs create a virtual tunnel interface and rely on routing tables to determine traffic flow, making them ideal for environments where routing is the primary decision-making mechanism.
- A. Correct.
Policy-based IPSec VPNs are designed to define traffic selection criteria based on specific policies, such as source and destination IPs, and are suitable for this requirement.
- B. Incorrect.
Route-based IPSec VPNs do not allow granular traffic selection based on policies; they rely on routing tables, making this option incorrect.
- C. Correct.
Route-based IPSec VPNs are ideal for environments where routing tables dictate traffic flow, aligning with the requirement for the second data center.
- D. Incorrect.
Policy-based IPSec VPNs are not appropriate for scenarios where routing tables are used to direct traffic, making this option incorrect.