400-007 Exam - Question 231

Question

Refer to the exhibit. Company XYZ must design a DMVPN tunnel between the three sites. Chicago is going to act as the NHS and the company wants DMVPN to detect peer endpoint failures. Which technology should be used in the design?

Examice · Accepted Answer

To design a DMVPN tunnel that can detect peer endpoint failures, IP SLA is the appropriate technology. IP SLA (Service Level Agreement) enables the network to actively monitor the reachability and performance of IP applications by generating traffic that simulates real application traffic throughout the network. This helps to detect when a peer endpoint becomes unreachable efficiently.

bdp123 · Answer

tunnel keepalives are not supported with tunnel protection, VRF, mGRE, or NX-OS.  I would think all DMVPN deployments would use IPSEC for protection (although DMVPN does not require this)

4f12874 · Answer

Detecting peer endpoint failures in DMVPN (Dynamic Multipoint Virtual Private Network) involves monitoring the state of the underlying tunnels and implementing mechanisms to identify when a peer endpoint becomes unreachable:
Implement IP SLA probes from local routers to the remote peer endpoints.

ZHICHENG · Answer

“detect peer endpoint failures”，SLA is ok

Rollizo · Answer

Could be GRE, because you can implement keepalive inside the tunnel to check the peer reachability

kalulosu · Answer

I think ans is B.

IP SLAs (IP Service Level Agreements) provide a mechanism to monitor network performance and trigger actions when certain conditions are not met. in DMVPN designs, IP SLAs can be used to ensure that peer endpoint failures can be quickly detected and necessary countermeasures can be taken.

400-007 Exam - Question 231

Discussion