hardMultiple ChoiceObjective-mapped
300-410 Practice Question: An engineer configures a DMVPN Phase 2 network
An engineer configures a DMVPN Phase 2 network. Spoke routers are configured with a route map that sets the next-hop to the tunnel interface for routes learned from the hub. This is intended to allow spoke-to-spoke direct communication. However, spoke-to-spoke traffic still goes through the hub. Which is the most likely explanation?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The route map is applied on the spoke router inbound from the hub, but it should be applied on the hub router outbound to the spokes.
In DMVPN Phase 2, spoke-to-spoke direct communication requires that the spoke routers have a route with the next-hop set to the tunnel interface of the remote spoke. However, if the route map is applied inbound on the spoke from the hub, it sets the next-hop to the hub's tunnel interface, not the remote spoke. The correct approach is to use a route map on the hub that sets the next-hop to the spoke's tunnel IP when advertising routes, or to use the 'next-hop-self' command incorrectly. The edge case is that the route map is applied on the spoke, not the hub.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The route map is applied on the spoke router inbound from the hub, but it should be applied on the hub router outbound to the spokes.
Why this is correct
The hub must set the next-hop to the remote spoke's tunnel IP; the spoke cannot change the next-hop for routes received from the hub.
- ✗
The route map uses a prefix-list that does not match the spoke's subnet.
Why it's wrong here
Even if matched, the next-hop would still be the hub's tunnel IP.
- ✗
The spoke routers have NHRP authentication mismatch, preventing direct communication.
Why it's wrong here
NHRP authentication affects registration, not route next-hop.
- ✗
The tunnel mode is mGRE on the spokes, which does not support spoke-to-spoke.
Why it's wrong here
Phase 2 supports spoke-to-spoke with mGRE.
Go deeper
Related to this question
Learn chapter
Introduction to ENARSI Exam and Network Fundamentals
Key term
Policy Based Routing
Policy Based Routing (PBR) is a technology that allows network traffic to be forwarded based on user-defined policies rather than just the destination IP address in the routing table.
Key term
DMVPN Phase 2
DMVPN Phase 2 is an advanced Cisco routing technology that allows spoke routers to communicate directly with one another without sending traffic through a central hub, using dynamic routing protocols and multipoint GRE tunnels.
About these practice questions
One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.