300-410 Infrastructure Services Practice Question
A network engineer is configuring DMVPN Phase 3 on a hub router. The hub must forward traffic directly between spokes without traversing the hub. Which command is required on the hub to enable this behavior?
⚠ Common exam trap
Watch out — candidates often confuse the roles of ip nhrp redirect and ip nhrp shortcut, placing the spoke command on the hub or vice versa.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ip nhrp redirect
For DMVPN Phase 3, the hub must be configured with ip nhrp redirect to inform spokes about superior paths. When a spoke sends traffic to the hub for a destination reachable via another spoke, the hub responds with an NHRP redirect, prompting the originating spoke to initiate a direct tunnel. The spoke must have ip nhrp shortcut to act on the redirect. Together, these commands enable dynamic direct spoke-to-spoke tunnels.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
ip nhrp map multicast dynamic
Why it's wrong here
This command is used on the hub in DMVPN to enable dynamic multicast mapping for routing protocols. It allows the hub to replicate multicast packets to all spokes without static mappings. However, it does not enable direct spoke-to-spoke communication; that requires NHRP redirect and shortcut mechanisms specific to Phase 3.
- ✗
ip nhrp network-id 1
Why it's wrong here
The ip nhrp network-id command assigns a network ID to the NHRP domain, ensuring that only routers with the same ID form adjacencies. It is a basic configuration requirement for all DMVPN phases but does not provide any functionality for direct spoke-to-spoke forwarding. It is not the command that enables Phase 3 behavior.
- ✗
ip nhrp shortcut
Why it's wrong here
The ip nhrp shortcut command is configured on spoke routers, not the hub. It enables the spoke to intercept traffic and use NHRP to resolve a direct path to another spoke. While necessary for Phase 3, it does not belong on the hub. The hub requires ip nhrp redirect to signal spokes about better paths.
- ✓
ip nhrp redirect
Why this is correct
The ip nhrp redirect command is essential for DMVPN Phase 3. It allows the hub to send NHRP redirect messages to spokes, informing them of a more optimal path directly to the destination spoke. Without this, spokes continue sending traffic through the hub, defeating the purpose of Phase 3. This command works in conjunction with ip nhrp shortcut on the spokes.
Go deeper
Related to this question
Learn chapter
Device Management and Network Monitoring (SNMP, Syslog, NetFlow)
Key term
DMVPN Phase 2
DMVPN Phase 2 is an advanced Cisco routing technology that allows spoke routers to communicate directly with one another without sending traffic through a central hub, using dynamic routing protocols and multipoint GRE tunnels.
Key term
DMVPN Phase 3
DMVPN Phase 3 is a Cisco networking technology that allows branch offices to connect directly to each other without always going through a central hub, but with smarter routing that lets the hub control the traffic paths more efficiently.
About these practice questions
One of 1,401 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.