A township board’s DMVPN spokes still hair-pin all spoke-to-spoke traffic through the hub. Which missing Phase 3 features are the most likely cause?
Select an answer to reveal the explanation.
Short Explanation
Still hair-pinning? The hub never waved the "go talk directly" flag — that flag is NHRP redirect, and spokes need shortcut enabled to listen. Fix those two and township spokes can build the direct path. mGRE stays; do not blame IKE version first.
Full Explanation
Persistent hub hair-pinning on a design that intends Phase 3 usually means NHRP redirect is missing on the hub or shortcut is missing on spokes, so dynamic spoke-to-spoke tunnels never form. EIGRP split-horizon issues affect routing advertisement, not the NHRP redirect mechanism itself. Point-to-point GRE abandons the DMVPN multipoint model. IKEv2 is fully capable of protecting DMVPN overlays. Verify redirect/shortcut before redesigning routing or crypto.