CCNP ENARSI 300-410 · VPN · DMVPN

DMVPN: mGRE, NHRP, Phase 2 and Phase 3

One tunnel interface per router, spokes that register themselves with the hub, and branch-to-branch tunnels that appear only when traffic needs them. Build DMVPN phase 2 with OSPF, fix a broken spoke, move to phase 3 with redirects and shortcuts, and encrypt everything with one IPsec profile.

69 min read5 chapters4 labs7 quiz

This module is part of the paid plans

The free Starter plan opens the first module of every path. Upgrade to unlock this module's lesson, labs, quiz and scenarios.

Your free Starter plan includes

  • ✓First module of every path — lessons and quizzes
  • ✓3 hands-on labs in total
  • ✓Practice questions (up to 10 per set)
  • ✓Build your own lab — 3 sessions a month, up to 4 devices
Start freeLog in

Inside this module

  • Lab · Build a DMVPN phase 2 network with OSPF
  • Troubleshoot · Kochi cannot reach Pune
  • Lab · Move the cloud to DMVPN phase 3
  • Lab · Encrypt the DMVPN with one shared IPsec profile
🎓 For educational purposes only — all devices are simulationsTerms of UsePrivacy Policy© 2026 Network Kings
CONFIG by Network Kings — an educational IT simulation platform for learning purposes only. It is not Cisco IOS, Junos, FortiOS or PAN-OS and contains no Cisco, Juniper, Fortinet or Palo Alto Networks software. Cisco, IOS, CCNA, CCNP, Juniper, JNCIA, JNCIS, JNCIP, Fortinet, FortiGate, FortiOS, NSE, Palo Alto Networks, PAN-OS and PCNSE are trademarks of their respective owners. Network Kings is not affiliated with or endorsed by Cisco Systems, Inc., Juniper Networks, Inc., Fortinet, Inc. or Palo Alto Networks, Inc.