300-730 SVPN: Implementing Secure Solutions with Virtual Private Networks

By Cisco · Question Mode

QuestionQ26

Site-to-site Virtual Private Networks on Routers and Firewalls

Question Image

Refer to the exhibit. The DMVPN tunnel drops at random intervals, and no tunnel protection is configured. Which spoke configuration mitigates the tunnel drops?

Explanation

The NHRP registration timeout sets the interval between spoke registration messages, and it must not exceed the NHRP holdtime. Configuring a 120-second holdtime and a 20-second registration timeout renews the spoke registration well before it expires, preventing loss of the NHRP mapping and resulting tunnel drops. Cisco documents that the registration-timeout range is from 1 second through the NHRP holdtime.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!