QuestionQ29

Site-to-site Virtual Private Networks on Routers and Firewalls

Which VPN technology must be used to ensure that routers can dynamically establish connections with one another rather than send traffic through a hub, and can advertise routes without using a dynamic routing protocol?

Explanation

FlexVPN establishes direct spoke-to-spoke crypto tunnels through virtual tunnel interfaces, IKEv2, and NHRP, allowing traffic to bypass the hub. It also supports IKE-propagated static routes during IKEv2 security-association establishment, so route information can be exchanged without a dynamic routing protocol.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!