A network administrator is troubleshooting an issue with a DMVPN tunnel. From the output of the show dmvpn command, the administrator notes that the tunnel is in the IPsec state. What problem does this state indicate?
- The line protocol of the DMVPN tunnel is down.
- The DMVPN spoke router has not registered.
- IPsec tunnels have not established IKE sessions.
- IPsec security associations are not established.
Explanation: The command show dmvpn [detail] provides the tunnel interface, tunnel role, tunnel state, and tunnel peers with uptime. When the DMVPN tunnel interfaceis administratively shut down, there are no entries associated to that tunnel interface. The tunnel states are, in order of establishment:
- INTF: The line protocol of the DMVPN tunnel is down.
- IKE: DMVPN tunnels configured with IPsec have not yet successfully established an Internet key exchange (IKE) session.
- IPsec: An IKE session is established but an IPsec security association (SA) has not yet been established.
- NHRP: The DMVPN spoke router has not yet successfully registered.
- Up: The DMVPN spoke router has registered with the DMVPN hub and received an ACK (positive registration reply) from the hub.
Exam with this question: CCNP ENARSI 8 Course Final Exam Answers
Please login or Register to submit your answer