Best way to encrypt MPLS WAN's

[carl_townshend]

Hi All

At the moment, we have an MPLS WAN, using encrypted GRE tunnels, manually configured.

This isn't scalable and requires lots of manual tunnel configs each time a site is added.

What is the best way forward for this, DMVPN or GETVPN?

Cheers

[Filip Knezevic]

They are similar solutions, but both would be better in your situation. GETVPN is essentially a DMVPN on steroids. So if your router supports GETVPN, I would suggest that road. 

[Captain HoOmi]

Well the best benefit of getvpn is being tunellness and hence much faster. Go with Getvpn if you can.

I think this link may be helpful for you : https://micronicstraining.com/getvpn-over-dmvpn/#targetText=General%20rule%20for%20both%20is,MPLS%20VPN).