A network administrator needs to create a tunnel between two offices so that different Layer 3 protocols (for example, IPv4, IPv6, or routing updates) can traverse the public Internet. The solution should add minimal overhead and does not require built-in encryption or authentication. Which tunneling protocol best meets these requirements?
Generic Routing Encapsulation (GRE) can encapsulate a wide variety of OSI Layer-3 passenger protocols inside an IP carrier, letting dissimilar routed protocols move across a single-protocol backbone. GRE itself provides no confidentiality, integrity, or endpoint authentication, so it is often paired with IPsec when those protections are needed. IPsec includes strong encryption and authentication, which violates the "no built-in security" condition. TLS/SSL secures individual application sessions rather than transporting multiple routed protocols, and MPLS is a label-switching technology used mainly by service-provider networks to forward traffic and build VPN services rather than for simple point-to-point tunnels.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What does GRE stand for and how does it work?
Open an interactive chat with Bash
How does IPSec differ from GRE?
Open an interactive chat with Bash
What are the scenarios when you would use GRE instead of IPSec?