mediumMultiple Choice
300-410 Practice Question: Given the following partial DMVPN configuration…
Given the following partial DMVPN configuration on a hub router:
interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp network-id 100 ip nhrp authentication cisco123
tunnel source GigabitEthernet0/0 tunnel mode gre multipoint
ip nhrp map multicast dynamic ip nhrp redirect
!
What is the purpose of the 'ip nhrp redirect' command?
⚠ Common exam trap
Candidates often confuse 'ip nhrp redirect' (hub-side command enabling spoke-to-spoke shortcuts) with 'ip nhrp shortcut' (spoke-side command that installs the shortcut routes), or assuming redirect means the hub forwards traffic through itself rather than enabling direct paths.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It enables the hub to send redirect messages to spokes, telling them to use a direct tunnel to another spoke.
The 'ip nhrp redirect' command enables NHRP redirect functionality on the hub, allowing it to inform spoke routers when a more optimal direct spoke-to-spoke path exists. When a spoke sends traffic through the hub destined for another spoke's network, the hub forwards the initial packets but also sends an NHRP redirect message back to the originating spoke, telling it to resolve the destination NBMA address directly. This triggers the spoke to send an NHRP resolution request, establishing a direct DMVPN tunnel to the destination spoke, bypassing the hub for subsequent traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
It enables the hub to send redirect messages to spokes, telling them to use a direct tunnel to another spoke.
Why this is correct
The ip nhrp redirect command lets the hub inform a spoke that a shorter path exists to a destination, prompting the spoke to build a direct tunnel. This is the core mechanism enabling DMVPN Phase 3 shortcut switching.
- ✗
It causes the hub to redirect all traffic through the hub itself.
Why it's wrong here
NHRP redirect lets the hub inform spokes that a shorter path exists, prompting them to build direct spoke-to-spoke tunnels rather than routing everything via the hub. It is tempting because redirect sounds like forcing traffic through the hub, but that is the opposite of its function.
- ✗
It enables the hub to dynamically map multicast addresses.
Why it's wrong here
Multicast mapping is handled by 'ip nhrp map multicast dynamic', which lets the hub replicate broadcasts to registered spokes; redirect instead sends NHRP traffic-indication messages telling the originating spoke to build a direct tunnel. The command would be relevant when configuring multicast forwarding over DMVPN, not shortcut switching.
- ✗
It disables NHRP on the tunnel interface.
Why it's wrong here
Redirect leaves NHRP fully operational; it only instructs the hub to notify spokes that a shorter path exists, prompting them to resolve the destination NBMA address. Disabling NHRP is done with 'no ip nhrp network-id' or by removing NHRP commands, so this option confuses a shortcut-signalling feature with teardown.
Visual reference
Go deeper
Related to this question
Learn chapter
Device Management and Network Monitoring (SNMP, Syslog, NetFlow)
Key term
DMVPN Phase 2
DMVPN Phase 2 is an advanced Cisco routing technology that allows spoke routers to communicate directly with one another without sending traffic through a central hub, using dynamic routing protocols and multipoint GRE tunnels.
About these practice questions
One of 1,401 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.