nerdexam
Cisco

350-401 · Question #130

Which statement about dynamic GRE between a headend router and a remote router is true?

The correct answer is D. The remote router initiates the tunnel connection. In dynamic GRE setups like DMVPN, the remote router actively initiates the tunnel connection to the headend router, particularly when the remote has a dynamic IP address.

Submitted by asante_acc· Mar 6, 2026

Question

Which statement about dynamic GRE between a headend router and a remote router is true?

Options

  • AThe headend router learns the IP address of the remote end router statically
  • BA GRE tunnel without an IP address has a status of administratively down
  • CGRE tunnels can be established when the remote router has a dynamic IP address
  • DThe remote router initiates the tunnel connection

How the community answered

(41 responses)
  • A
    5% (2)
  • B
    2% (1)
  • C
    2% (1)
  • D
    90% (37)

Why each option

In dynamic GRE setups like DMVPN, the remote router actively initiates the tunnel connection to the headend router, particularly when the remote has a dynamic IP address.

AThe headend router learns the IP address of the remote end router statically

In dynamic GRE, the headend router learns the IP addresses of remote routers dynamically through a mechanism like NHRP (Next Hop Resolution Protocol), rather than relying on static configuration.

BA GRE tunnel without an IP address has a status of administratively down

A GRE tunnel interface configured without an IP address might be up, but it would not be functional for routing IP traffic; 'administratively down' specifically means the interface has been manually disabled.

CGRE tunnels can be established when the remote router has a dynamic IP address

While it is true that GRE tunnels *can* be established with dynamic remote IP addresses in dynamic GRE (e.g., DMVPN), this capability is achieved precisely because the remote router initiates the connection and registers its dynamic IP, making option D a more fundamental aspect of the dynamic process.

DThe remote router initiates the tunnel connectionCorrect

In dynamic GRE deployments such as DMVPN, the remote (spoke) router is explicitly responsible for initiating the tunnel connection to the headend (hub) router. This initiation is critical because the headend router often does not know the dynamic or changing IP address of the remote router beforehand and thus cannot initiate the connection itself.

Concept tested: Dynamic GRE (DMVPN) tunnel establishment

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-16/sec-conn-dmvpn-xe-16-book/sec-conn-dmvpn-oview.html

Topics

#Dynamic GRE#GRE tunneling

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice