nerdexam
Cisco

300-730 · Question #195

Refer to the exhibit. A customer has a DMVPN establishment problem between a hub and a spoke router. To troubleshoot this problem, the network administrator checks the traffic counters of the tunnel…

The correct answer is C. Configure the correct NHS. The NHRP output showing req-failed=30 and repl-recv=0 means every registration attempt to the configured NHS failed with no replies, indicating the NHS address is wrong.

Troubleshooting VPNs

Question

Refer to the exhibit. A customer has a DMVPN establishment problem between a hub and a spoke router. To troubleshoot this problem, the network administrator checks the traffic counters of the tunnel and notices that return traffic is not coming back from the other end of the tunnel.
SPOKE#show ip nhrp rhs detail
Legend: Ex-Expeding replies, R=Responding
Total: 10.10.1.1 E rec=30 req=30 req-failed 30 repl-recv 0
Pending Registration Requests:
Registration Request Reqid 4371, Ret 64 NHS 10 10 1 1

Options

  • AMake the tunnel source and destination reachable.
  • BImplement the NHRP shortcut.
  • CConfigure the correct NHS.
  • DReplace the network-id.

How the community answered

(37 responses)
  • A
    11% (4)
  • B
    5% (2)
  • C
    59% (22)
  • D
    24% (9)

Why each option

The NHRP output showing req-failed=30 and repl-recv=0 means every registration attempt to the configured NHS failed with no replies, indicating the NHS address is wrong.

AMake the tunnel source and destination reachable.

Basic tunnel reachability is confirmed as a prerequisite by the fact that 30 requests were transmitted; if the tunnel were down, no requests would be sent at all.

BImplement the NHRP shortcut.

NHRP shortcuts facilitate spoke-to-spoke direct paths and have no effect on the spoke-to-hub registration process shown failing in the exhibit.

CConfigure the correct NHS.Correct

With req=30, req-failed=30, and repl-recv=0, the spoke successfully sent 30 NHRP registration requests to NHS 10.10.1.1 but received zero replies, which is the definitive symptom of an incorrect or unreachable NHS address. Correcting the NHS IP on the spoke tunnel interface will allow registration replies to return and complete the DMVPN adjacency.

DReplace the network-id.

A mismatched NHRP network-id prevents a spoke from joining the NHRP domain entirely rather than causing selective reply drops against a specific NHS.

Concept tested: NHRP NHS registration failure diagnosis in DMVPN

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nhrp/configuration/xe-16/nhrp-xe-16-book/cfg-nhrp-dmvpn.html

Topics

#DMVPN#NHRP registration#NHS#req-failed

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice