Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.
| 1. | In the case of redundant DMVPNs with multiple GRE tunnels establishing between the same spokes, it is necessary to use shared IPsec SAs for IPsec SAs to establish properly. |
| 2. | The routing protocol detects both device and path failures using its keepalives. |
| 3. | You should design the VPN to meet an organization’s requirements for availability. The design should provide a level of high availability that is commensurate with the cost of meeting availability needs. |
| 4. | If complete redundant paths are needed, you should either deploy a completely redundant network path that is under the control of local administration or use multiple-transport networks (two ISPs) and connect them to either redundant interfaces or redundant VPN devices. |
| 5. | Dynamic routing protocols will automatically detect peer failures and path failures and then automatically reroute around the failure if redundant paths and devices are in place. |
| 6. | In a VTI-based IPsec VPN topology, an interior routing protocol will see the VTI-based VPN tunnel as a point-to-point link. |
| 7. | An interior routing protocol will view a DMVPN as either point-to-multipoint (for strict hub-and-spoke DMVPNs) or as a broadcast network (partial or full mesh DMVPNs). |
| 8. | To provide redundancy for a DMVPN topology, it is recommended to create two separate DMVPN networks by using two hub routers and one or two spoke routers at remote sites. |
| 9. | Routing protocols can detect both path failures and VPN device failures. |