DMVPN CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is deploying a DMVPN Phase 3 network with two hubs in different data centers for redundancy. The network engineer wants to ensure that spoke-to-spoke traffic between branch offices bypasses the hubs after the initial connection. The engineer has configured the tunnel interfaces, NHRP, and routing on all devices. What additional configuration is required on the hubs to enable direct spoke-to-spoke communication?

   • ADisable split-horizon on the hub's routing protocol.
   • BConfigure a static route on each spoke pointing to the other spoke's tunnel IP.
   • CSet the NHRP holdtime to a lower value on the spokes.
   • DEnable NHRP redirect on the hub tunnel interfaces.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A large enterprise has a dual-hub DMVPN Phase 3 network. Spokes are configured with both hubs as NHRP servers. After a recent change, the network team notices that some spokes are not establishing direct tunnels with each other. The 'show dmvpn' command on a source spoke shows an 'incomplete' mapping for the destination spoke. The destination spoke is reachable via the hub. The NHRP registration on the destination spoke shows it is registered with both hubs. What is the most likely cause of the incomplete mapping?

   • AThe source spoke is sending NHRP resolution requests to a hub that does not have the destination spoke's mapping.
   • BThe hub is configured with NHRP redirect but not NHRP resolution.
   • CThe destination spoke has a firewall blocking NHRP resolution replies.
   • DThe routing protocol is not advertising the destination spoke's tunnel network.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A network engineer is troubleshooting a dual-hub DMVPN Phase 3 network. After a failure of Hub1, the spokes fail over to Hub2. However, the engineer notices that some spokes are not able to establish direct tunnels with each other. The 'show dmvpn' command on a source spoke shows that it has a mapping for the destination spoke, but the mapping is 'incomplete'. The destination spoke is reachable via Hub2. What is the most likely cause of this issue?

   • AThe routing protocol has not converged on the new path through Hub2.
   • BThe NHRP holdtime on the spokes is set too low.
   • CThe spokes have not re-registered with Hub2 after the failure of Hub1.
   • DThe tunnel interface on the spokes has gone down.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A network administrator is troubleshooting a dual-hub DMVPN Phase 3 network. The administrator suspects that a spoke is not registered with one of the hubs. Which command output would provide the most definitive evidence of this issue?

   • Ashow crypto session on the spoke, showing only one active IPsec session.
   • Bshow interface tunnel 0 on the spoke, showing the tunnel is up.
   • Cshow ip route on the spoke, showing a route to only one hub.
   • Dshow dmvpn on the spoke, showing only one NHRP mapping for the hubs.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A network engineer is troubleshooting a DMVPN Phase 3 network where spoke-to-spoke tunnels are not being established. The engineer has verified that NHRP redirect is enabled on the hubs and that the spokes are registered. However, the spokes are still sending traffic through the hub. The 'show dmvpn' command on the source spoke shows a mapping for the destination spoke, but the mapping is 'incomplete'. What is the most likely cause of this issue?

   • AThe hub is not configured with NHRP redirect.
   • BThe source spoke's tunnel interface is not configured with a valid source IP.
   • CThe routing protocol is not advertising the destination spoke's tunnel network.
   • DThe destination spoke is not registered with the hub that the source spoke is using for NHRP resolution.
   Reveal Solution Discussion Select an answer first