A fire district standardizing future branch crypto VPNs wants reusable IKEv2 configuration blocks and less dependence on mGRE/NHRP for every new site type. When should the architects favor FlexVPN over classic DMVPN Phase 3?
Select an answer to reveal the explanation.
Short Explanation
If the team wants Lego-style IKEv2 profiles and mixed peer flavors, FlexVPN is the tidy kit. If the whole story is NHRP multipoint GRE with Phase 3 shortcuts, stick with classic DMVPN.
Full Explanation
Choose FlexVPN when reuse of IKEv2 profiles, virtual-templates, and support for varied peer types outweighs the need for a classic mGRE/NHRP DMVPN fabric. Retain DMVPN Phase 3 when the operational model centers on NHRP registration, redirects, and dynamic spoke-to-spoke shortcuts over multipoint GRE. Non-IPsec GRE-only hub-and-spoke or multicast RP quirks alone do not define that FlexVPN-versus-DMVPN decision.