You have been asked to design and deploy a VPN-based backup network for your enterprise. Your network is currently configured across a single OSPF Area 0. All the VPN termination points in your network will be Juniper Networks SRX Series devices.
How must you configure your devices so that static routing can be avoided?
A.
OSPF will not provide the needed functionality. The group VPN feature is required to create the next-hop tunnel binding and arrange key management across routing domains.
B.
Configure VPN tunnels between the SRX Series devices and enable OSPF Area 0 on the st.0 interfaces. You can use the next-hop tunnel binding (NHTB) protocol for next hops to the tunnels.
C.
Configure VPN tunnels between the SRX Series devices and enable OSPF Area 0 on the st.0 interfaces. You must configure next-hop tunnel binding for the remote peers mapping next hops to VPN names.
D.
Because OSPF will not provide the required next-hop VPN binding alone, dynamic VPN must be used to discover the next-hop tunnel binding automatically.
I choose B