Which two statements about DMVPN are true?

Which two statements about DMVPN are true? (Choose two.)
A. Multicast traffic is not supported.
B. It requires full-mesh connectivity on the network.
C. IPsec encryption is not supported with statically addressed spokes.
D. It uses NHRP to create a mapping database of spoke addresses.
E. It supports dynamic addresses for spokes in a hub-and-spoke VPN topology.

cisco-exams

3 thoughts on “Which two statements about DMVPN are true?

  1. DE

    https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/29240-dcmvpn.html

    The Dynamic Multipoint VPN (DMVPN) feature allows users to better scale large and small IPSec VPNs by combining generic routing encapsulation (GRE) tunnels, IPSec encryption, and Next Hop Resolution Protocol (NHRP) to provide users with easy configuration through crypto profiles, which override the requirement for defining static crypto maps, and dynamic discovery of tunnel endpoints.

    NHRP—A client and server protocol where the hub is the server and the spokes are the clients. The hub maintains an NHRP database of the public interface addresses of the each spoke. Each spoke registers its real address when it boots and queries the NHRP database for real addresses of the destination spokes in order to build direct tunnels.

    1. Which two statements about DMVPN are true? (Choose two.)
      A. IPsec encryption not supported with statically addressed spokes.
      B. t requires full-mesh connectivity on the network.
      C. It uses NHRP to create a mapping database of spoke addresses
      D. Multicast traffic is not supported
      E. It supports dynamic addresses for spokes in a hub-and-spoke VPN topology.
      Correct Answer: AC

Leave a Reply

Your email address will not be published. Required fields are marked *


The reCAPTCHA verification period has expired. Please reload the page.