A sanitation department needs modular IKEv2 profiles that can cover…

Question

A sanitation department needs modular IKEv2 profiles that can cover both site-to-site branches and certain remote-access clients on the same crypto headend. Which approach best matches that requirement versus classic DMVPN Phase 3?

Accepted Answer

Adopt FlexVPN so IKEv2 virtual-access interfaces and profiles can serve site-to-site and remote-access styles from one modular framework. — Classic DMVPN is great for spoke hubs that all speak NHRP. When you also need remote-access-style clients and clean IKEv2 building blocks on one headend, FlexVPN’s modular profiles are the better toolbox.

Answer

Keep classic DMVPN NHRP and add Frame Relay inverse-ARP for the remote-access users.

Answer

Replace the WAN with MPLS L2VPN pseudowires so IKEv2 is unnecessary.

Answer

Use GETVPN group keys alone because GDOI already terminates remote-access SSL portals.

A sanitation department needs modular IKEv2 profiles that can cover both site-to-site branches and certain remote-access clients on the same crypto headend. Which approach best matches that requirement versus classic DMVPN Phase 3?

Short Explanation

Full Explanation