Exam 300-410 All QuestionsBrowse all questions from this exam
Question 327

Refer to the exhibit. An administrator is setting up above shown routers to enable MVPN with mGRE mode. What would be the recommended interface configuration that must be done by the engineer to make it to work?

    Correct Answer: C

    To correctly configure the interface for MVPN with mGRE mode, the tunnel source must be the physical interface's IP address, not the tunnel interface's IP address. Additionally, while the command 'tunnel mode IPSec multipoint' is invalid, 'tunnel mode gre multipoint' is correct for setting up dynamic multipoint VPN (DMVPN) in mGRE mode. Therefore, among the provided options, the correct configuration is to use the physical IP address as the tunnel source and to set the tunnel mode to 'gre multipoint'.

Discussion
kebkimOption: C

Answer is C. The same question is 113.

raw007

But C is configured with GRE Multipoint

BrandOption: C

"tunnel mode IPsec multipoint" doesn't seem like a valid command at all. But the options A and B using tunnel source as tunnel IP itself so they can't be correct too. WTF is this nonsense... C1-HUB(config-if)#tunnel mode ipsec ? ipv4 over IPv4 ipv6 over IPv6 C1-HUB(config-if)#tunnel mode ipsec ipv4 ? v6-overlay Overlay traffic v6 <cr> C1-HUB(config-if)#tunnel mode ipsec ipv4

kaupzOption: B

there is no right answer... ACD are excluded because: R1(config-if)#tunnel mode ipsec multipoint ^ % Invalid input detected at '^' marker. And B is excluded because tunnel source cannot be tunnel itself

Pietjeplukgeluk

You pointed out the issue with this question really clearly. B and C are partly correct, you can argue what is better, in essence they are are both "least wrong". Anyway, i agree C is less wrong if you have an opinion on it anyway.

dapardo

Answers relies on the question it self, it says that mgre tunnel must be setup and the only command that allows that is tunnel mode gre multipoint. Im going with B

sylvesterbello1Option: C

C is the correct answer. Physical interface ip is the source interface, not the tunnel ip

jarzOption: C

Answer is C

DUBC89xOption: C

Answer is C You cannot have a tunnel destination from the Tunnel IP address, has to be the address of the physical link.

HungarianDishOption: C

"tunnel source" = physical interface tunnel mode gre multipoint Do one of the following: tunnel protection ipsec profile name tunnel protection psk key https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-16-11/sec-conn-dmvpn-xe-16-11-book/sec-conn-dmvpn-dmvpn.html

chinopla

There is no right answer. You cannot do "tunnel mode IPSEC multipoint", it doesn't exists. And, you cannot tunnel source from the tunnel neither.

inteldarvidOption: C

100 % is C because 127.17.0.1 is a NBMA PUBLIC soruce

forccnpOption: C

Tunel source should be physical address

LilienenOption: C

Answer is C