Which capability enables centralized segmentation of traffic into isolated VPNs?

Which capability enables centralized segmentation of traffic into isolated VPNs?

• A. STP regioning
• B. VTP pruning
• C. EtherChannel pinning
• D. VPN segmentation

Answer: (D)

Centralized segmentation of traffic into isolated VPNs is accomplished by using VPN segmentation. In SD-WAN, a VPN represents a separate overlay network with its own routing, policies, and security rules. The central controller defines these VPNs and pushes the configuration to all edge devices, so traffic that belongs to one VPN stays isolated from traffic in other VPNs, even though the same physical network is shared. This enables multi-tenant or department-specific isolation with consistent policy enforcement across locations. The other options describe different functions: STP regioning deals with spanning-tree loop prevention, VTP pruning manages VLAN advertisements, and EtherChannel pinning addresses link aggregation. None of these provide centralized, overlay-based traffic isolation into separate VPNs.

Centralized segmentation of traffic into isolated VPNs is accomplished by using VPN segmentation. In SD-WAN, a VPN represents a separate overlay network with its own routing, policies, and security rules. The central controller defines these VPNs and pushes the configuration to all edge devices, so traffic that belongs to one VPN stays isolated from traffic in other VPNs, even though the same physical network is shared. This enables multi-tenant or department-specific isolation with consistent policy enforcement across locations.

The other options describe different functions: STP regioning deals with spanning-tree loop prevention, VTP pruning manages VLAN advertisements, and EtherChannel pinning addresses link aggregation. None of these provide centralized, overlay-based traffic isolation into separate VPNs.