ADVPN

ADVPN (Auto Discovery VPN) is an IPsec technology that allows a traditional hub-and-spoke VPN’s spokes to establish dynamic, on-demand, direct tunnels between each other to avoid routing through the topology's hub device. The primary advantage is that it provides full meshing capabilities to a standard hub-and-spoke topology. This greatly reduces the provisioning effort for full spoke-to-spoke low delay reachability and addresses the scalability issues associated with very large fully meshed VPN networks.

The following topics provide information on ADVPN for SD-WAN:

• ADVPN and shortcut paths

• Active dynamic BGP neighbor triggered by ADVPN shortcut

• SD-WAN monitor on ADVPN shortcuts

• Hold down time to support SD-WAN service strategies

• Keeping sessions in established ADVPN shortcuts while they remain in SLA

• Using a single IKE elector in ADVPN to match all SD-WAN control plane traffic

• SD-WAN in large scale deployments