JN0-637: Security, Professional (JNCIP-SEC)Demo

By Juniper · Question Mode

QuestionQ4

Advanced IPsec VPNs

You are using AutoVPN to deploy a hub-and-spoke VPN that connects your enterprise sites.

Which two statements are true in this scenario?

Choose two
  • A New spoke sites can be added without explicit configuration on the hub.
  • B AutoVPN requires OSPF over IPsec to discover and add new spokes.
  • C All spoke-to-spoke IPsec communication will pass through the hub.
  • D Direct spoke-to-spoke tunnels can be established automatically.
Explanation

AutoVPN automatically establishes a hub tunnel to each spoke that selects that hub, allowing new spokes to be added without explicit per-spoke configuration on the hub. In a hub-and-spoke topology, spokes build tunnels only to their configured hubs; communication between spokes is therefore routed through a hub. OSPF is optional and direct spoke-to-spoke tunnels are not created in this topology.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!