- A
The tunnel mode must be configured as tunnel mode ipv6ip.
Correct. Manual IPv6-in-IPv4 tunnels use tunnel mode ipv6ip.
- B
The tunnel interface requires both an IPv4 address and an IPv6 address.
Correct. The tunnel interface must have an IPv4 address (or source/destination) for the outer header and an IPv6 address for the inner payload.
- C
Manual tunnels support multicast traffic natively.
Why wrong: Incorrect. Manual tunnels are point-to-point and do not support multicast; GRE tunnels are required for multicast.
- D
The tunnel destination can be a multicast IPv4 address.
Why wrong: Incorrect. Manual tunnels require a unicast IPv4 destination address.
- E
The IPv4 address of the tunnel source is automatically embedded in the IPv6 prefix.
Why wrong: Incorrect. That behavior is for 6to4 tunnels, not manual tunnels. Manual tunnels use explicit addressing.
Quick Answer
The correct answer is that the tunnel interface requires both an IPv4 address and an IPv6 address, because a manual IPv6-in-IPv4 tunnel encapsulates IPv6 packets directly into IPv4 packets using protocol type 41, as defined in RFC 4213, meaning the tunnel source and destination must be IPv4 while the traffic inside is IPv6. This configuration is explicitly set with the `tunnel mode ipv6ip` command, which distinguishes it from other tunnel types like GRE or 6to4. On the Cisco CCNP ENARSI 300-410 exam, this topic tests your understanding of IPv6 transition mechanisms and often appears as a trap where candidates confuse manual tunnels with automatic 6to4 tunnels—remember that manual tunnels require explicit IPv4 addresses on both ends, while 6to4 uses an IPv6 prefix derived from the IPv4 address. A key memory tip: think of the manual tunnel as a direct point-to-point IPv4 “pipe” carrying IPv6, so both address families must be configured on the tunnel interface.
300-410 IPv6 Tunneling Techniques Practice Question
This 300-410 practice question tests your understanding of ipv6 tunneling techniques. This is a configuration task: choose the command set that satisfies every stated requirement. Small differences — like 'secret' vs 'password' or 'transport input ssh' vs 'all' — change whether the answer is correct. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Which TWO statements about IPv6 manual tunnels (IPv6-in-IPv4) are true? (Choose TWO.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
The tunnel mode must be configured as tunnel mode ipv6ip.
Option A is correct because the `tunnel mode ipv6ip` command explicitly configures the tunnel interface for IPv6-in-IPv4 manual tunneling. This mode encapsulates IPv6 packets directly into IPv4 packets using protocol type 41, as defined in RFC 4213. Without this mode, the tunnel interface would not properly handle the encapsulation and decapsulation of IPv6 traffic over an IPv4 infrastructure.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The tunnel mode must be configured as tunnel mode ipv6ip.
Why this is correct
Correct. Manual IPv6-in-IPv4 tunnels use tunnel mode ipv6ip.
Related concept
Read the scenario before looking for a memorised answer.
- ✓
The tunnel interface requires both an IPv4 address and an IPv6 address.
Why this is correct
Correct. The tunnel interface must have an IPv4 address (or source/destination) for the outer header and an IPv6 address for the inner payload.
Related concept
Read the scenario before looking for a memorised answer.
- ✗
Manual tunnels support multicast traffic natively.
Why it's wrong here
Incorrect. Manual tunnels are point-to-point and do not support multicast; GRE tunnels are required for multicast.
- ✗
The tunnel destination can be a multicast IPv4 address.
Why it's wrong here
Incorrect. Manual tunnels require a unicast IPv4 destination address.
- ✗
The IPv4 address of the tunnel source is automatically embedded in the IPv6 prefix.
Why it's wrong here
Incorrect. That behavior is for 6to4 tunnels, not manual tunnels. Manual tunnels use explicit addressing.
Common exam traps
Common exam trap: answer the scenario, not the keyword
Cisco often tests the distinction between manual tunnels and automatic 6to4 tunnels, where candidates mistakenly think the IPv4 source address is embedded in the IPv6 prefix (true for 6to4) or that multicast destinations are allowed (true for GRE tunnels, not manual IPv6-in-IPv4).
Detailed technical explanation
How to think about this question
In manual IPv6-in-IPv4 tunnels, the tunnel interface acts as a virtual point-to-point link, requiring explicit configuration of both an IPv4 source and destination address. The IPv6 traffic is encapsulated with an IPv4 header (protocol 41) and forwarded over the IPv4 network. A real-world scenario is connecting two isolated IPv6 islands across an IPv4-only backbone, where each tunnel endpoint must be manually configured with the peer's IPv4 address, and the tunnel interface must have an IPv6 address to route IPv6 packets.
KKey Concepts to Remember
- Read the scenario before looking for a memorised answer.
- Find the constraint that changes the correct option.
- Eliminate answers that are true in general but not in this case.
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A small business has 20 workstations on the 192.168.1.0/24 network and one public IP from its ISP. The router uses PAT (NAT overload) so all 20 devices share one public address using different source ports. NAT questions test whether you understand the four address terms and which direction each translation applies.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
- →
IPv6 Tunneling Techniques — study guide chapter
Learn the concepts, then practise the questions
- →
IPv6 Tunneling Techniques practice questions
Targeted practice on this topic area only
- →
All 300-410 questions
2,152 questions across all exam domains
- →
Cisco CCNP ENARSI 300-410 study guide
Full concept coverage aligned to exam objectives
- →
300-410 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Related 300-410 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Layer 3 Technologies practice questions
Practise 300-410 questions linked to Layer 3 Technologies.
EIGRP Troubleshooting practice questions
Practise 300-410 questions linked to EIGRP Troubleshooting.
OSPF Troubleshooting (v2/v3) practice questions
Practise 300-410 questions linked to OSPF Troubleshooting (v2/v3).
BGP Troubleshooting practice questions
Practise 300-410 questions linked to BGP Troubleshooting.
Route Redistribution practice questions
Practise 300-410 questions linked to Route Redistribution.
Policy-Based Routing (PBR) practice questions
Practise 300-410 questions linked to Policy-Based Routing (PBR).
VRF-Lite practice questions
Practise 300-410 questions linked to VRF-Lite.
Route Maps and Route Filtering practice questions
Practise 300-410 questions linked to Route Maps and Route Filtering.
Administrative Distance practice questions
Practise 300-410 questions linked to Administrative Distance.
Route Summarization practice questions
Practise 300-410 questions linked to Route Summarization.
Bidirectional Forwarding Detection (BFD) practice questions
Practise 300-410 questions linked to Bidirectional Forwarding Detection (BFD).
VPN Technologies practice questions
Practise 300-410 questions linked to VPN Technologies.
Practice this exam
Start a free 300-410 practice session
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Questions learners often ask
What does this 300-410 question test?
IPv6 Tunneling Techniques — This question tests IPv6 Tunneling Techniques — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: The tunnel mode must be configured as tunnel mode ipv6ip. — Option A is correct because the `tunnel mode ipv6ip` command explicitly configures the tunnel interface for IPv6-in-IPv4 manual tunneling. This mode encapsulates IPv6 packets directly into IPv4 packets using protocol type 41, as defined in RFC 4213. Without this mode, the tunnel interface would not properly handle the encapsulation and decapsulation of IPv6 traffic over an IPv4 infrastructure.
What should I do if I get this 300-410 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on 300-410
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Consider this configuration on Router R5: ``` interface Tunnel0 ipv6 address 2001:DB8:7::1/64 tunnel source 192.168.10.1 tunnel destination 192.168.20.2 tunnel mode ipv6ip tunnel ttl 64 ``` What is the effect?
medium- A.The tunnel will not work because the tunnel source is an IP address, not an interface.
- ✓ B.The tunnel will work, and the TTL field in the outer IPv4 header will be set to 64.
- C.The tunnel mode should be 'gre ip' for IPv6 over IPv4.
- D.The tunnel will use the IPv6 TTL for the outer header.
Why B: Option B is correct because the configuration creates an IPv6-over-IPv4 manual tunnel (tunnel mode ipv6ip). The tunnel source is specified as an IP address, which is valid; the router uses that address as the source of the outer IPv4 header. The 'tunnel ttl 64' command explicitly sets the Time-to-Live field in the outer IPv4 header to 64, overriding the default value.
Variation 2. Given this configuration on Router R3: ``` interface Tunnel0 no ip address ipv6 address 2001:DB8:5::1/64 tunnel source 192.168.1.1 tunnel destination 192.168.2.2 tunnel mode ipv6ip ``` What is missing or incorrect?
medium- ✓ A.The tunnel mode should be 'gre ipv6' because the source and destination are IPv6 addresses.
- B.The tunnel interface must have an IPv4 address.
- C.The tunnel source should be an interface, not an IP address.
- D.The configuration is correct and will function as an IPv6 over IPv4 tunnel.
Why A: Option A is correct because the tunnel mode 'ipv6ip' is used for IPv6-over-IPv4 manual tunnels, which require the tunnel source and destination to be IPv4 addresses. However, in this configuration, the tunnel source and destination are IPv4 addresses (192.168.1.1 and 192.168.2.2), but the tunnel mode should be 'gre ipv6' only if the payload is IPv6 and the transport is IPv4 using GRE encapsulation. Actually, the correct mode for a manually configured IPv6-over-IPv4 tunnel is 'tunnel mode ipv6ip', which is already set. The real issue is that the tunnel source and destination are IPv4 addresses, which is correct for 'ipv6ip' mode. Option A states the mode should be 'gre ipv6', which is incorrect because 'gre ipv6' is used when both the tunnel source and destination are IPv6 addresses (IPv6 transport). Therefore, the configuration is actually correct for an IPv6-over-IPv4 manual tunnel, making option D the correct answer, not A. The question's answer key is flawed; the correct answer should be D.
Keep practising
More 300-410 practice questions
- Drag and drop the steps to negotiate an IKEv2 IPsec site-to-site tunnel into the correct order, from first to last.
- Drag and drop the steps to troubleshoot an IPsec site-to-site VPN adjacency failure into the correct order, from first t…
- Drag and drop the steps to verify and validate the operational state of an IPsec site-to-site VPN into the correct order…
- Drag and drop the steps to configure a GRE tunnel for IPv6 over IPv4 into the correct order, from first to last.
- Drag and drop the steps to troubleshoot IPv6 over IPv4 tunnel adjacency or connectivity failures into the correct order,…
- Drag and drop the steps to verify and validate the operational state of an IPv6 tunneling technique into the correct ord…
Last reviewed: Jun 24, 2026
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.