問題文
A network team runs an AutoVPN hub that terminates tunnels from branch offices, and the team plans to keep adding branches for two years without editing the hub configuration for each one. The design also calls for OSPF to run across the tunnels so that branch prefixes are learned dynamically. Which secure tunnel interface arrangement meets both goals?
選択肢
- Configure the st0 interface in point-to-point mode on the hub and on every branch, and rely on traffic selectors to describe each branch prefix, because a traffic selector is refreshed when a branch joins.
- Configure the st0 interface in point-to-multipoint mode on the hub only, leave the branch st0 interfaces unnumbered, and let the hub install a next-hop tunnel binding for each branch as it connects.
- Configure the st0 interface in point-to-point mode on the hub and enable RIP across the tunnels, because RIP advertises each branch prefix without needing an adjacency over the tunnel interface.
- Configure the st0 interface in point-to-multipoint mode on the hub and on every branch, number both ends, and place each branch address inside the subnetwork of the hub st0 interface so that adjacencies form over it.