Courseiva
hardMultiple ChoiceObjective-mapped

300-410 Practice Question: An engineer configures a DMVPN Phase 2 network

An engineer configures a DMVPN Phase 2 network. Spoke-to-spoke tunnels are established, but traffic between spokes is not using the direct tunnel. What is the most likely explanation?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The spoke routers have a default route via the hub, so they send traffic to the hub instead of initiating NHRP resolution for a direct tunnel.

In DMVPN Phase 2, spoke-to-spoke tunnels require that the spoke routers have a route to the destination network via the tunnel interface with a next hop that triggers NHRP resolution. If the spoke has a default route pointing to the hub, it will not attempt to resolve the spoke-to-spoke tunnel.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The spoke routers have a default route via the hub, so they send traffic to the hub instead of initiating NHRP resolution for a direct tunnel.

    Why this is correct

    Phase 2 requires that spokes have a specific route to the remote subnet to trigger NHRP; a default route prevents this.

  • The hub has 'no ip nhrp redirect' configured, which disables spoke-to-spoke tunnel setup.

    Why it's wrong here

    In Phase 2, the hub does not send redirect messages; that is Phase 3.

  • The spokes have 'ip nhrp shortcut' enabled, which forces all traffic through the hub.

    Why it's wrong here

    Shortcut is used in Phase 3, not Phase 2.

  • The tunnel mode is set to 'tunnel mode gre multipoint' on the spokes, which is incorrect.

    Why it's wrong here

    Spokes can use point-to-point GRE in Phase 2, but multipoint is also valid.

Visual reference

Client Recursive Resolver Root DNS (13 root servers) TLD DNS (.com, .org, …) Authoritative example.com query IP addr answer

About these practice questions

Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.