Design Considerations for Connecting Data Centers and Remote Sites using MPLS over the Public Internet

Simplifying Network Design with MPLS Encapsulation for Hub-and-Spoke Architecture

Question

A company wants to connect two data center sites using a hub-and-spoke design with 2000 remote sites.

One design consideration is the requirement to transfer MPLS packets over the public Internet.

In addition, one router at each site should be used, and the MPLS packets must be encapsulated inside IP packets because the public Internet cannot transfer native MPLS packets.

Which feature can be used to simplify the network design?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E.

B.

The requirement in this scenario is to connect two data center sites using a hub-and-spoke design with 2000 remote sites, and transfer MPLS packets over the public Internet. Additionally, one router at each site should be used, and the MPLS packets must be encapsulated inside IP packets because the public Internet cannot transfer native MPLS packets. The question asks which feature can be used to simplify the network design.

Option A: GET VPN can be used to encrypt the MPLS packets with IPsec. GET VPN (Group Encrypted Transport VPN) is a tunnel-less VPN technology that can be used to encrypt MPLS packets with IPsec. However, it does not address the requirement to encapsulate the MPLS packets inside IP packets. Therefore, Option A is not a suitable solution for this scenario.

Option B: DM VPN can be used to build up GRE tunnels dynamically with MPLS encapsulation inside. DM VPN (Dynamic Multipoint VPN) is a technology that can be used to build up GRE tunnels dynamically with MPLS encapsulation inside. This option can address the requirement to encapsulate the MPLS packets inside IP packets. Therefore, Option B is a suitable solution for this scenario.

Option C: L2TPv3 can be used to encapsulate the MPLS packets. L2TPv3 (Layer 2 Tunneling Protocol Version 3) is a technology that can be used to encapsulate Layer 2 traffic over IP networks. However, in this scenario, the requirement is to encapsulate MPLS packets, which are Layer 3 packets. Therefore, Option C is not a suitable solution for this scenario.

Option D: Site-to-site IPsec without GRE can be used to encapsulate the MPLS packets. Site-to-site IPsec without GRE (Generic Routing Encapsulation) can be used to encapsulate MPLS packets inside IP packets. However, this option does not address the requirement to use a hub-and-spoke design with one router at each site. Therefore, Option D is not a suitable solution for this scenario.

Option E: PPPoE can be used to encapsulate the MPLS packets. PPPoE (Point-to-Point Protocol over Ethernet) is a protocol that can be used to encapsulate PPP frames inside Ethernet frames. However, in this scenario, the requirement is to encapsulate MPLS packets, which are Layer 3 packets. Therefore, Option E is not a suitable solution for this scenario.

In conclusion, Option B (DM VPN) is the most suitable solution for this scenario as it can address the requirement to encapsulate the MPLS packets inside IP packets and use a hub-and-spoke design with one router at each site.