Courseiva

JNCIS-ENT · domain

Tunnels

This domain covers Junos tunnel interfaces: IP-IP, GRE, and related encapsulation used to carry traffic across a transport network. Questions test the tunnel interface's role with routing protocols, outer-header protocol numbers, which interface family to configure for the encapsulated payload, and the operational commands that display configured tunnel source and destination addresses.

36 questions12 easy11 medium13 hard

Focused practice

Practice Tunnels questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about Tunnels

Be able to configure and verify Junos tunnel interfaces, including GRE and IP-IP. Know that the interface family reflects the encapsulated payload, not the transport, and use the correct operational command to confirm tunnel source and destination addresses.

The primary function of a Junos tunnel interface when used with routing protocols

The protocol number in the outer IP header for an IP-IP tunnel

Which interface family must be configured under a gr- interface unit for GRE over IPv4 carrying IPv6

The operational command that shows configured tunnel source and destination addresses

Watch out for

Common Tunnels exam traps

  • ▸Assuming the tunnel interface's family must match the transport network rather than the encapsulated payload being carried.
  • ▸Confusing the outer IP header protocol number for IP-IP with GRE or other encapsulation protocol numbers.
  • ▸Believing a tunnel interface forwards or routes traffic on its own instead of relying on routing protocols and the underlying transport.

Question index

All Tunnels questions (36)

Click any question to see the full explanation, or start a practice session above.

1

Which TWO factors must be carefully managed when running OSPF over a GRE tunnel interface on Junos devices? (Choose two.)

Hard
2

An administrator configures a GRE tunnel with a tunnel key enabled for security segmentation between two sites. The tunnel comes up, but traffic fails to pass. Debugging reveals that packets are dropped because the receiving router rejects the packets. What is the most probable configuration mismatch?

Hard
3

You are configuring a GRE tunnel over an IPv4 network, but you want to secure the GRE traffic using IPsec (GRE over IPsec). In Junos, how is this typically structured on SRX or MX devices?

Hard
4

On an MX Series router, you configure a GRE tunnel that terminates on a routing instance (VRF). Where must the tunnel source and destination addresses be routable?

Hard
5

Which TWO parameters are mandatory when configuring a basic GRE tunnel interface in Junos? (Choose two)

Easy
6

When configuring an IP-IP tunnel on Junos, can you run multicast routing protocols like PIM over the IP-IP tunnel?

Hard
7

You are configuring a GRE tunnel carrying IPv6 traffic over an IPv4 transport network (GRE over IPv4). Which interface family must be configured under the gr- interface unit?

Hard
8

Which THREE characteristics distinguish GRE tunnels from IP-IP tunnels on Junos devices? (Choose three)

Medium
9

You need to configure an IP-IP tunnel on a Junos device. Which interface prefix is designated for IP-IP tunnels in the Junos CLI?

Medium
10

You have configured an IP-IP tunnel, but traffic fails to pass through. You run 'show interfaces ip-0/0/0' and see that the output displays 'Input drops' incrementing rapidly. What is the most likely reason?

Medium
11

You are configuring an IP-IP tunnel on a Junos routing platform. Which statement correctly identifies how IP-IP encapsulation differs from GRE encapsulation?

Medium
12

An administrator has configured a GRE tunnel between two SRX Series devices. Traffic originating from behind the local security zone destined for the tunnel interface is being dropped by default security policies. Which action must be taken to ensure transit traffic can enter the GRE tunnel?

Hard
13

Which protocol number is used in the outer IP header for an IP-IP tunnel?

Easy
14

You are configuring a GRE tunnel and want to ensure that integrity checks are performed on the transmitted packets to detect corruption. Which parameter should you add to the tunnel configuration?

Medium
15

Which THREE factors should be considered when planning MTU size for traffic traversing a GRE tunnel? (Choose three)

Medium
16

An administrator notices that CPU utilization on the Routing Engine spikes when a high volume of transit traffic is directed through a locally terminated GRE tunnel on an MX router without inline services configured. What is the cause?

Hard
17

Which Junos operational mode command is used to verify the operational status and packet statistics of configured GRE tunnel interfaces?

Easy
18

An administrator needs to configure a basic GRE tunnel between two Junos devices across a routed IP network. Which interface family must be enabled on the physical transit interface to allow the GRE encapsulated packets to traverse the network?

Easy
19

Which TWO statements are true regarding Junos tunnel interface naming conventions? (Choose two)

Easy
20

When troubleshooting a non-functional GRE tunnel on a Junos device, which TWO operational commands or verification steps are most effective for diagnosing the root cause? (Choose two)

Hard
21

When configuring a GRE tunnel on Junos, which two parameters are mandatory under the specific gr- interface hierarchy to establish the tunnel endpoint connectivity?

Easy
22

Which TWO tools or commands can be used on Junos to verify the operational packet flow through a tunnel interface? (Choose two)

Easy
23

Which TWO actions must be performed when configuring a functional GRE tunnel between two Junos devices over an intermediate IP network? (Choose two.)

Hard
24

You have configured a GRE tunnel, and you want to verify that the tunnel source and destination parameters match what is expected. Which command shows the configured tunnel source and destination addresses?

Medium
25

Which THREE statements regarding IP-IP tunnels on Junos devices are accurate? (Choose three)

Medium
26

When configuring an IP-IP tunnel on a Junos device, what happens to the source and destination IP addresses of the original packet when it is encapsulated?

Hard
27

Which interface naming convention is used by Junos OS to identify a generic routing encapsulation (GRE) tunnel interface?

Easy
28

Which THREE statements are true regarding IP-IP encapsulation in Junos OS? (Choose three.)

Medium
29

What is the primary function of a Junos tunnel interface when used in conjunction with routing protocols?

Easy
30

You are configuring a GRE tunnel between two Juniper routers to carry OSPF traffic. The tunnel is up, but OSPF adjacencies are not forming. Which two actions would you take to troubleshoot and resolve this issue? (Choose two.)

Hard
31

You are configuring a GRE tunnel between two Juniper routers. The tunnel interface is gr-0/0/0, and you have configured the tunnel source as ge-0/0/0.0 and the tunnel destination as 192.0.2.2. You notice that the tunnel interface is up, but traffic sent through the tunnel is being dropped. Which action would you take to resolve this issue?

Medium
32

Which Junos configuration statement defines the destination address of a GRE tunnel?

Easy
33

You configure a GRE tunnel between two routers. Router A can ping Router B's tunnel IP address successfully, but devices behind Router A cannot ping devices behind Router B across the tunnel. What is the most likely cause?

Medium
34

An enterprise network uses a GRE tunnel to connect two sites running OSPF. OSPF neighbor adjacencies fail to form over the GRE tunnel even though unicast pings between the tunnel endpoints succeed. Upon inspecting interface configurations, you notice that OSPF hellos are not being received by the peer. What is the most likely cause of this issue?

Hard
35

What is the official protocol number assigned in the outer IP header for GRE encapsulation?

Easy
36

When configuring a GRE tunnel source and destination address on a Junos device, which configuration hierarchy is used?

Easy

Frequently asked questions

What does the Tunnels domain cover on the JNCIS-ENT exam?
Be able to configure and verify Junos tunnel interfaces, including GRE and IP-IP. Know that the interface family reflects the encapsulated payload, not the transport, and use the correct operational command to confirm tunnel source and destination addresses.
How many questions are in this domain?
This page lists all 36 Tunnels questions in the JNCIS-ENT question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only Tunnels questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
Juniper Networks Enterprise Routing and Switching, Specialist (JNCIS-ENT, JN0-352) (JNCIS-ENT) Tunnels Practice Questions