Q24Service Design
Refer to the exhibit. Company XYZ must design a DMVPN tunnel among the three sites. Chicago will act as the NHS, and the company wants DMVPN to detect peer endpoint failures. Which technology should be used in the design?
← → navigate · a answer
Community votes
Discussion · 6
B 3
Selected Answer: B
tunnel keepalives are not supported with tunnel protection, VRF, mGRE, or NX-OS. I would assume all DMVPN deployments would use IPSEC for protection (although DMVPN does not require this)
B 2
Selected Answer: B
Detecting peer endpoint failures in DMVPN (Dynamic Multipoint Virtual Private Network) means monitoring the state of the underlying tunnels and putting in place mechanisms to identify when a peer endpoint becomes unreachable:
Implement IP SLA probes from local routers to the remote peer endpoints.
B 1
Selected Answer: B
“detect peer endpoint failures”，SLA is fine
C 1
Selected Answer: C
Could be GRE, because you can use keepalive inside the tunnel to check peer reachability
1
it is not
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-16/sec-conn-dmvpn-xe-16-book/sec-conn-dmvpn-dmvpn.html#GUID-7220ED1F-A67D-43DC-8D2D-E8E73E9D2162
1
Selected Answer: イ
I think the ans is B.
IP SLAs (IP Service Level Agreements) provide a way to monitor network performance and trigger actions when certain conditions are not met. In DMVPN designs, IP SLAs can be used to make sure peer endpoint failures are detected quickly and the needed countermeasures can be taken.