Question 2mediummultiple choice
Read the full VPN explanation →300-410 Practice Questions
30 questions from this objective
A network engineer runs the following command on Router R1:
R1# show dmvpn
Legend: Attrb -> S: Static, D: Dynamic, I: Incomplete N: NATed, L: Local, X: No Socket #Ent -> Number of NHRP entries with same NBMA peer NHS Status: E => Expecting Replies, R => Responding, W => Waiting UpDn Time -> Up or Down Time for a Tunnel ==========================================================================
Interface: Tunnel0, IPv4 NHRP Details
Type:Hub, NHRP Peers:2,
# Ent Peer NBMA Addr Peer Tunnel Addr State UpDn Tm Attrb
----- --------------- ---------------- ----- -------- ----- 1 10.1.1.2 172.16.0.2 UP 00:02:15 D 1 10.1.1.3 172.16.0.3 UP 00:01:45 D
Based on this output, which statement is correct?
A network engineer runs the following command on Router R1:
R1# show ip nhrp 192.168.1.0/24 via 172.16.0.2
Tunnel0 created 00:00:15, expire 00:01:45 Type: dynamic, Flags: unique NBMA address: 10.1.1.2
192.168.2.0/24 via 172.16.0.3
Tunnel0 created 00:00:10, expire 00:01:50 Type: dynamic, Flags: unique NBMA address: 10.1.1.3
Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show crypto isakmp sa
dst src state conn-id slot status
10.1.1.2 10.1.1.1 MM_ACTIVE 1 0 ACTIVE 10.1.1.3 10.1.1.1 MM_ACTIVE 2 0 ACTIVE
Based on this output, which statement is correct?
A network engineer runs the following command on Router R1:
R1# show crypto ipsec sa
interface: Tunnel0
Crypto map tag: DMVPN, local addr 10.1.1.1protected vrf: (none) local ident (addr/mask/prot/port): (172.16.0.0/255.255.255.0/47/0) remote ident (addr/mask/prot/port): (172.16.0.0/255.255.255.0/47/0) current_peer 10.1.1.2 port 500 PERMIT, flags={origin_is_acl,} #pkts encaps: 150, #pkts encrypt: 150, #pkts digest: 150 #pkts decaps: 145, #pkts decrypt: 145, #pkts verify: 145 #send errors 0, #recv errors 0
local crypto endpt.: 10.1.1.1, remote crypto endpt.: 10.1.1.2 path mtu 1500, ip mtu 1500, ip mtu idb Tunnel0 current outbound spi: 0x12345678(305419896) PFS (Y/N): N, DH group: none
Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route + - replicated route, % - next hop override
Gateway of last resort is not set
172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks O 172.16.0.0/24 [110/100] via 172.16.0.2, 00:00:15, Tunnel0 O 172.16.0.0/24 [110/100] via 172.16.0.3, 00:00:10, Tunnel0
Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show dmvpn detail
Legend: Attrb -> S: Static, D: Dynamic, I: Incomplete N: NATed, L: Local, X: No Socket #Ent -> Number of NHRP entries with same NBMA peer NHS Status: E => Expecting Replies, R => Responding, W => Waiting UpDn Time -> Up or Down Time for a Tunnel ==========================================================================
Interface: Tunnel0, IPv4 NHRP Details
Type:Spoke, NHRP Peers:1,
# Ent Peer NBMA Addr Peer Tunnel Addr State UpDn Tm Attrb
----- --------------- ---------------- ----- -------- ----- 1 10.1.1.1 172.16.0.1 UP 00:10:00 S
Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show ip nhrp nhs
NHS: 172.16.0.1 Tunnel0 status: registered NHS: 172.16.0.2 Tunnel0 status: not registered
Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show crypto isakmp sa detail
Codes: C - IKE, M - IKEv2, P - IPsec
C-id Local Remote I-VRF Status Encr Hash Auth DH Lifetime Cap. 1 10.1.1.1 10.1.1.2 ACTIVE aes sha md5 2 86400 2 10.1.1.1 10.1.1.3 ACTIVE aes sha md5 2 86400
Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show ip nhrp traffic
NHRP Traffic Statistics Sent: 100 requests, 50 replies Received: 50 requests, 100 replies
Based on this output, what is the problem?
Consider the following partial DMVPN configuration on a hub router:
interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp network-id 100 ip nhrp authentication cisco123
tunnel source GigabitEthernet0/0 tunnel mode gre multipoint
ip nhrp map multicast dynamic
!
What is the effect of this configuration?
A spoke router has the following DMVPN configuration:
interface Tunnel0 ip address 10.0.0.2 255.255.255.0 ip nhrp network-id 100 ip nhrp nhs 10.0.0.1
tunnel source GigabitEthernet0/0 tunnel mode gre multipoint
ip nhrp map 10.0.0.1 192.168.1.1
!
What is missing from this configuration?
Given the following partial DMVPN configuration on a hub router:
interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp network-id 100 ip nhrp authentication cisco123
tunnel source GigabitEthernet0/0 tunnel mode gre multipoint
ip nhrp map multicast dynamic ip nhrp redirect
!
What is the purpose of the 'ip nhrp redirect' command?
A network engineer configures a DMVPN spoke with the following:
interface Tunnel0 ip address 10.0.0.3 255.255.255.0 ip nhrp network-id 100 ip nhrp nhs 10.0.0.1
tunnel source GigabitEthernet0/0 tunnel mode gre multipoint
ip nhrp map 10.0.0.1 192.168.1.1 ip nhrp map multicast 192.168.1.1
!
What will happen when the spoke tries to send traffic to another spoke (10.0.0.4)?
Consider the following DMVPN configuration on a hub router:
interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp network-id 100 ip nhrp authentication cisco123 ip nhrp map multicast dynamic
tunnel source GigabitEthernet0/0 tunnel mode gre multipoint !
router eigrp 100 network 10.0.0.0 0.0.0.255
!
What is a potential issue with this configuration?
A network engineer configures a DMVPN spoke with OSPF as the routing protocol:
interface Tunnel0 ip address 10.0.0.2 255.255.255.0 ip nhrp network-id 100 ip nhrp nhs 10.0.0.1
tunnel source GigabitEthernet0/0 tunnel mode gre multipoint
ip nhrp map 10.0.0.1 192.168.1.1 ip nhrp map multicast 192.168.1.1
!
router ospf 1 network 10.0.0.0 0.0.0.255 area 0
!
What is a common issue with OSPF in this DMVPN Phase 2 configuration?
More DMVPN questions available in the full practice test.
Continue Practising →