Refer to the exhibit.
Hub config:
crypto ipsec transform-set myset esp-3des esp-sha-hmac
!
crypto ipsec profile DMVPN set transform-set myset
!
interface TunnelO
ip address 172.16.1.1 255.253.253.0
no ip redirects
ip nhrp authentication DMVPN01
ip nhrp map multicast dynamic
ip nhrp network-id 100
tunnel source EthernetO/O
tunnel mode gre multipoint
tunnel protection ipsec profile DMVPN
!
interface Ethernet0/0
ip address 209.165.200.234 255.255.255.248
Spoke2 Config:
crypto ipsec transform-set myset esp-3des esp-sha-hmac
!
crypto ipsec profile DMVPN
set transform-set myset
!
interface TunnelO
ip address 172.16.1.3 255.255.255.0
no ip redirects
ip nhrp authentication DMVPN1
ip nhrp map 172.16.1.1 209.165.200.234
ip nhrp map multicast 209.165.200.234
ip nhrp network-id 200
ip nhrp nhs 172.16.1.1
tunnel source Ethernet0/0
tunnel mode gre multipoint
tunnel protection ipsec profile DMVPN
!
Interface Ethernet0/0
ip address 209.165.202.146 255.255.255.248
Hub debugs:
•Apr 21 10:17:31.860: NHRP: Receive Registration Request via TunnelO vrf 0, packet size: 107
•Apr 21 10:17:31.861: NHRP-ATTR: Sending error indication
The network administrator is adding a new spoke, but the tunnel is not passing traffic.
What could cause this issue?
A.
DMVPN is a point-to-point tunnel, so there can be only one spoke.
B.
There is no EIGRP configuration, and therefore the second tunnel is not working.
C.
The NHRP authentication is failing.
D.
The transform set must be in transport mode, which is a requirement for DMVPN.