A cloud IOS XE router redistributes connected routes into OSPF toward the campus. The campus then tries to reach the router's public WAN address through the tunnel, and the tunnel drops. What should be stopped?
Select an answer to reveal the explanation.
Short Explanation
You advertised the tunnel's own front door back through the tunnel. You stop the public WAN address from being sent toward the campus. The VPC subnet can still be advertised, and it is not the address the campus used to loop the tunnel.
Full Explanation
Redistributing connected routes sends every connected subnet, including the public WAN address that is the tunnel source or destination. The campus can then prefer the tunnel as the way to reach that address, which removes the outside path and drops the tunnel. Filter the public address out of the advertisement. Keep advertising the VPC subnet the campus is supposed to learn. IKE is not wrong because a connected route exists. Tearing down OSPF is not required. A tunnel can stay up while connected routes exist, as long as the outside address is not learned through the tunnel. Exam caveat: check the tunnel source and the tunnel destination separately. Filtering only one of them leaves the other able to recurse. Operational check: the campus route to the public WAN address should point at the internet, not at the tunnel, and the tunnel should stay up.