Question 1mediummultiple choice
Read the full VPN explanation →300-410 DMVPN • Complete Question Bank
Complete 300-410 DMVPN question bank — all 0 questions with answers and detailed explanations.
A network engineer runs the following command on Router R1:
R1# show dmvpn
Legend: Attrb -> S: Static, D: Dynamic, I: Incomplete N: NATed, L: Local, X: No Socket #Ent -> Number of NHRP entries with same NBMA peer NHS Status: E => Expecting Replies, R => Responding, W => Waiting UpDn Time -> Up or Down Time for a Tunnel ==========================================================================
Interface: Tunnel0, IPv4 NHRP Details
Type:Hub, NHRP Peers:2,
# Ent Peer NBMA Addr Peer Tunnel Addr State UpDn Tm Attrb
----- --------------- ---------------- ----- -------- ----- 1 10.1.1.2 172.16.0.2 UP 00:02:15 D 1 10.1.1.3 172.16.0.3 UP 00:01:45 D
Based on this output, which statement is correct?
A network engineer runs the following command on Router R1:
R1# show ip nhrp 192.168.1.0/24 via 172.16.0.2
Tunnel0 created 00:00:15, expire 00:01:45 Type: dynamic, Flags: unique NBMA address: 10.1.1.2
192.168.2.0/24 via 172.16.0.3
Tunnel0 created 00:00:10, expire 00:01:50 Type: dynamic, Flags: unique NBMA address: 10.1.1.3
Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show crypto isakmp sa
dst src state conn-id slot status
10.1.1.2 10.1.1.1 MM_ACTIVE 1 0 ACTIVE 10.1.1.3 10.1.1.1 MM_ACTIVE 2 0 ACTIVE
Based on this output, which statement is correct?
A network engineer runs the following command on Router R1:
R1# show crypto ipsec sa
interface: Tunnel0
Crypto map tag: DMVPN, local addr 10.1.1.1protected vrf: (none) local ident (addr/mask/prot/port): (172.16.0.0/255.255.255.0/47/0) remote ident (addr/mask/prot/port): (172.16.0.0/255.255.255.0/47/0) current_peer 10.1.1.2 port 500 PERMIT, flags={origin_is_acl,} #pkts encaps: 150, #pkts encrypt: 150, #pkts digest: 150 #pkts decaps: 145, #pkts decrypt: 145, #pkts verify: 145 #send errors 0, #recv errors 0
local crypto endpt.: 10.1.1.1, remote crypto endpt.: 10.1.1.2 path mtu 1500, ip mtu 1500, ip mtu idb Tunnel0 current outbound spi: 0x12345678(305419896) PFS (Y/N): N, DH group: none
Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route + - replicated route, % - next hop override
Gateway of last resort is not set
172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks O 172.16.0.0/24 [110/100] via 172.16.0.2, 00:00:15, Tunnel0 O 172.16.0.0/24 [110/100] via 172.16.0.3, 00:00:10, Tunnel0
Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show dmvpn detail
Legend: Attrb -> S: Static, D: Dynamic, I: Incomplete N: NATed, L: Local, X: No Socket #Ent -> Number of NHRP entries with same NBMA peer NHS Status: E => Expecting Replies, R => Responding, W => Waiting UpDn Time -> Up or Down Time for a Tunnel ==========================================================================
Interface: Tunnel0, IPv4 NHRP Details
Type:Spoke, NHRP Peers:1,
# Ent Peer NBMA Addr Peer Tunnel Addr State UpDn Tm Attrb
----- --------------- ---------------- ----- -------- ----- 1 10.1.1.1 172.16.0.1 UP 00:10:00 S
Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show ip nhrp nhs
NHS: 172.16.0.1 Tunnel0 status: registered NHS: 172.16.0.2 Tunnel0 status: not registered
Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show crypto isakmp sa detail
Codes: C - IKE, M - IKEv2, P - IPsec
C-id Local Remote I-VRF Status Encr Hash Auth DH Lifetime Cap. 1 10.1.1.1 10.1.1.2 ACTIVE aes sha md5 2 86400 2 10.1.1.1 10.1.1.3 ACTIVE aes sha md5 2 86400
Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show ip nhrp traffic
NHRP Traffic Statistics Sent: 100 requests, 50 replies Received: 50 requests, 100 replies
Based on this output, what is the problem?
Consider the following partial DMVPN configuration on a hub router:
interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp network-id 100 ip nhrp authentication cisco123
tunnel source GigabitEthernet0/0 tunnel mode gre multipoint
ip nhrp map multicast dynamic
!
What is the effect of this configuration?
A spoke router has the following DMVPN configuration:
interface Tunnel0 ip address 10.0.0.2 255.255.255.0 ip nhrp network-id 100 ip nhrp nhs 10.0.0.1
tunnel source GigabitEthernet0/0 tunnel mode gre multipoint
ip nhrp map 10.0.0.1 192.168.1.1
!
What is missing from this configuration?
Given the following partial DMVPN configuration on a hub router:
interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp network-id 100 ip nhrp authentication cisco123
tunnel source GigabitEthernet0/0 tunnel mode gre multipoint
ip nhrp map multicast dynamic ip nhrp redirect
!
What is the purpose of the 'ip nhrp redirect' command?
A network engineer configures a DMVPN spoke with the following:
interface Tunnel0 ip address 10.0.0.3 255.255.255.0 ip nhrp network-id 100 ip nhrp nhs 10.0.0.1
tunnel source GigabitEthernet0/0 tunnel mode gre multipoint
ip nhrp map 10.0.0.1 192.168.1.1 ip nhrp map multicast 192.168.1.1
!
What will happen when the spoke tries to send traffic to another spoke (10.0.0.4)?
Consider the following DMVPN configuration on a hub router:
interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp network-id 100 ip nhrp authentication cisco123 ip nhrp map multicast dynamic
tunnel source GigabitEthernet0/0 tunnel mode gre multipoint !
router eigrp 100 network 10.0.0.0 0.0.0.255
!
What is a potential issue with this configuration?
A network engineer configures a DMVPN spoke with OSPF as the routing protocol:
interface Tunnel0 ip address 10.0.0.2 255.255.255.0 ip nhrp network-id 100 ip nhrp nhs 10.0.0.1
tunnel source GigabitEthernet0/0 tunnel mode gre multipoint
ip nhrp map 10.0.0.1 192.168.1.1 ip nhrp map multicast 192.168.1.1
!
router ospf 1 network 10.0.0.0 0.0.0.255 area 0
!
What is a common issue with OSPF in this DMVPN Phase 2 configuration?
A network engineer runs the following command to troubleshoot a DMVPN spoke not registering with the hub:
R2# debug nhrp
NHRP: Send Registration Request via Tunnel0 10.0.0.2, target 10.0.0.1 NHRP: Receive Registration Reply via Tunnel0 10.0.0.1, src 10.0.0.1, dst 10.0.0.2 NHRP: Registration successful for 10.0.0.2/32 via Tunnel0
What does this output indicate?
A network engineer runs the following command to verify DMVPN tunnel status:
R1# show ip nhrp detail 10.0.0.2/32 via Tunnel0
Created: 00:10:15, Expire: 01:49:45 Type: dynamic, Flags: unique registered NBMA: 192.168.1.2 (no socket)
What does this output indicate?
A network engineer runs the following command to troubleshoot EIGRP over DMVPN:
R1# debug eigrp packets
EIGRP: Received HELLO on Tunnel0 nbr 10.0.0.2 EIGRP: New peer 10.0.0.2
What does this output indicate?
A network engineer runs the following command to verify EIGRP routes over DMVPN:
R1# show ip eigrp topology all-links
P 10.10.10.0/24, 1 successors, FD is 128256 via 10.0.0.2 (128256/128256), Tunnel0 via 10.0.0.3 (131072/128256), Tunnel0
What does this output indicate?
A network engineer runs the following command to troubleshoot OSPF over DMVPN:
R1# debug ip ospf adj
OSPF: 2 Way Communication to 10.0.0.2 on Tunnel0, state 2WAY OSPF: Send DBD to 10.0.0.2 on Tunnel0 seq 0x1234 opt 0x52 flag 0x7 OSPF: Rcv DBD from 10.0.0.2 on Tunnel0 seq 0x1235 opt 0x52 flag 0x2 OSPF: Exchange Done with 10.0.0.2 on Tunnel0 OSPF: Build router LSA for area 0, router ID 1.1.1.1
What does this output indicate?
A network engineer runs the following command to verify OSPF database on a DMVPN hub:
R1# show ip ospf database router 2.2.2.2
OSPF Router with ID (1.1.1.1) (Process ID 1)
Router Link States (Area 0)
LS age: 100 Options: (No TOS-capability, DC) LS Type: Router Links Link State ID: 2.2.2.2 Advertising Router: 2.2.2.2 LS Seq Number: 80000001 Checksum: 0x1234 Length: 48 Number of Links: 1
Link connected to: a Transit Network (Link ID) Designated Router address: 10.0.0.1 (Link Data) Router Interface address: 10.0.0.2 Number of MTID metrics: 0 TOS 0 Metrics: 10
What does this output indicate?
A network engineer runs the following command to troubleshoot IPsec on a DMVPN tunnel:
R1# debug crypto isakmp
ISAKMP: received peer 192.168.1.2, port 500, local 192.168.1.1 ISAKMP: SA created, initiating IKE Main Mode ISAKMP: sent MM_SA proposal to 192.168.1.2 ISAKMP: received MM_SA response from 192.168.1.2 ISAKMP: Main Mode complete, starting Quick Mode ISAKMP: sent QM_SA request to 192.168.1.2 ISAKMP: received QM_SA response from 192.168.1.2 ISAKMP: Quick Mode done, IPsec SA established
What does this output indicate?
A network engineer runs the following command to verify IPsec transform sets on a DMVPN hub:
R1# show crypto ipsec transform-set
Transform set combined: { esp-aes 256 esp-sha-hmac } will negotiate = { Tunnel, },
Transform set TS1: { esp-aes 256 esp-sha-hmac } will negotiate = { Transport, },
What does this output indicate?
A network engineer runs the following command to verify crypto engine connections on a DMVPN spoke:
R2# show crypto engine connections active Crypto Engine Connections
ID Type Algorithm Encrypt Decrypt LastSeqN IP-Address 1 IPsec AES256-SHA 100 100 100 192.168.1.2
What does this output indicate?
An engineer is configuring a DMVPN Phase 3 network with EIGRP as the routing protocol. The hub router has the following configuration snippet:
interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp network-id 1 ip nhrp redirect
tunnel source GigabitEthernet0/1 tunnel mode gre multipoint !
router eigrp 100 network 10.0.0.0 0.0.0.255
Which TWO additional configuration changes are required on the hub to ensure that spokes can establish direct spoke-to-spoke tunnels? (Choose TWO.)