Implementing Secure Solutions with Virtual Private Networks (SVPN) — Question 36

In a FlexVPN deployment, the spokes successfully connect to the hub, but spoke-to-spoke tunnels do not form. Which troubleshooting step solves the issue?

Answer options

• A. Verify the spoke configuration to check if the NHRP redirect is enabled.
• B. Verify that the spoke receives redirect messages and sends resolution requests.
• C. Verify the hub configuration to check if the NHRP shortcut is enabled.
• D. Verify that the tunnel interface is contained within a VRF.

Correct answer: B

Explanation

The correct answer is B because for spoke-to-spoke communication to occur, it is essential for the spoke to receive NHRP redirect messages and send resolution requests. Option A is incorrect because enabling NHRP redirect alone does not guarantee spoke-to-spoke connectivity. Option C is also wrong as the hub's NHRP shortcut setting does not directly impact the spoke's ability to form tunnels. Option D is irrelevant since the VRF containment does not affect the formation of spoke-to-spoke tunnels.