A network team must carry IPv6 traffic securely across an IPv4-only WAN. Which single design is the recommended approach to both tunnel and encrypt IPv6 traffic end-to-end on IOS/IOS XE routers?
Choose an answer
Tap an option to check your answer.
Correct answer: Use GRE (tunnel mode ipv6ip) to carry IPv6 and apply an IPsec profile (tunnel protection) to the tunnel interface.
Why this is the answer
The recommended approach is to use GRE (tunnel mode ipv6ip) to encapsulate IPv6 traffic over the IPv4 WAN, and then apply an IPsec profile (tunnel protection) to the GRE tunnel interface. This method provides both tunneling for IPv6 over IPv4 and strong encryption for the encapsulated traffic, ensuring end-to-end security. Policy-based IPsec (crypto map) on a physical interface is less flexible for tunneling diverse traffic types and can be complex to manage for IPv6. Manual IP-in-IP tunneling lacks encryption, making it insecure. L2TPv3 over IPv4 is primarily for Layer 2 tunneling and does not inherently provide encryption; relying on MPLS for encryption is not a standard or secure practice for end-to-end encryption in this scenario.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed