A branch router uses business broadband and IKEv2 to an Azure VPN gateway. There is no private interconnect and no Catalyst SD-WAN controller. Someone calls the broadband private because the ISP sells it to businesses. Which model is this?
Select an answer to reveal the explanation.
Short Explanation
A business invoice does not make the internet private. You built native IPsec to the Azure VPN gateway over broadband, with no SD-WAN controllers. The ISP selling that circuit to companies does not turn it into an MPLS handoff.
Full Explanation
Native IPsec uses the public internet as the underlay and a provider VPN endpoint, here the Azure VPN gateway, with an encrypted payload. Business broadband is still that public underlay. It is not an MPLS handoff into private peering, and it is not a cross-connect from a cage the branch does not have. Catalyst SD-WAN internet connectivity needs the controllers and OMP. This branch has neither. Exam caveat: if the same ISP later delivers a real MPLS cloud handoff, that new circuit is a different model. The broadband VPN does not become private when the contract is renamed. Operational check: the branch tunnel destination should be the Azure public address, and the virtual-network prefixes should arrive through that IPsec session.