Q7Site-to-site Virtual Private Networks on Routers and Firewalls
Which technology is used for sending multicast traffic across a site-to-site VPN?
← → navigate · a answer
Community votes
Discussion · 7
4
GRE ist not supported on FTD > B is wrong.
But the classic case is answer A , which is correct.
A 3
Selected Answer: A
A is correct
ASA and FTD dont Support Gre
and Multicast is not supported by IPSEC without Gre
3
GRE is not supported in FTD, so A is correct
https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/216276-configure-route-based-site-to-site-vpn-t.html#anc6
A 2
Selected Answer: A
A is correct. GRE is a router solution.
A 2
Selected Answer: A
GRE is only supported on routers, so every answer except A is invalid
A 1
Selected Answer: A
agree with mazinhoo, the Cisco link listed supports answer A
1
When it comes to sending multicast traffic over a site-to-site VPN, the technology usually used is GRE (Generic Routing Encapsulation) over IPsec. On IOS Router, you can set up GRE over IPsec to let multicast traffic go through the VPN tunnel. It wraps multicast packets into GRE packets, which are then encrypted with IPsec. As for FTD (Firepower Threat Defense), it doesn't natively support GRE tunneling. However, you can still get multicast over IPsec functionality by using a workaround called IPsec Tunnel Mode over Transport Mode, which lets multicast traffic pass through the IPsec tunnel. In summary, both IOS Router and FTD can handle multicast traffic over a site-to-site VPN, but the exact implementation may vary