Implementing Secure Solutions with Virtual Private Networks (SVPN) — Question 101

A DMVPN spoke is configured with IKEv1 to secure the tunnel. Despite having a configuration similar to other working spokes, the tunnel is not coming up. Packet captures on the spoke show packets leaving the spoke router, but not making it to the hub router. Which solution resolves this issue?

Answer options

• A. Configure the spoke and hub to use the same IKE version.
• B. Ensure that devices between the hub and spoke are not blocking ESP traffic.
• C. Ensure that devices between the hub and spoke are not blocking GRE traffic.
• D. Enable the tunnel interface with the no shutdown command.

Correct answer: B

Explanation

The correct answer is B because if ESP traffic is being blocked by devices between the hub and spoke, the tunnel cannot establish. Options A and C, while important, do not address the specific issue of packet blockage. Option D is irrelevant as the tunnel interface being down is not indicated as the problem in this scenario.