300-730 SVPN: Implementing Secure Solutions with Virtual Private Networks

By Cisco · Question Mode

QuestionQ11

Site-to-site Virtual Private Networks on Routers and Firewalls

Question Image

Refer to the exhibit. The DMVPN spoke fails to establish a session with the hub. Which two actions resolve this problem?

Choose two
Explanation

An IKE security association requires compatible ISAKMP policy authentication, so the spoke must use pre-shared-key authentication to match the hub. NHRP registration also requires matching authentication when the hub is configured with an NHRP authentication key; configuring cisco123 on the spoke satisfies that requirement. The existing spoke NHS protocol address (10.0.0.1) and NBMA address (172.16.18.1) are already mapped correctly.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!