AdvancedPublished 2026-10-30

CCNP DMVPN: Build the Hub and First Spoke

Today's daily lab

Included with a subscription.

Spoke 2 is staged and waiting. Build the DMVPN hub and the first spoke so every site reaches the others through the hub.

Track

Est. time

75 minutes

Topics

Learning objectives

Spoke not in the hub's NHRP table: check the spoke's NHS and NBMA addresses
Spokes see the hub but not each other: the hub is not passing routes back out the tunnel

Subscribe to see the full topology.

How this lab is graded

Build it your way. Where a lab lets you choose a value — a VLAN name, an interface description — grading checks that you configured it, not which name you picked. Names that another line has to reference, like an ACL applied with access-class, are stated in the guide and do have to match.
Addresses, modes and protocol keywords are exact. An IP address, a subnet mask, switchport mode trunk, an encapsulation — these carry the meaning of the lab, so they are graded as written in the guide.
Grading reads your saved configuration. Export the lab from CML after you have configured it, and make sure anything you set is in the running-config — a change that only exists in a terminal session never reaches the grader.
You can submit as many times as you like. Your best score stands, and each attempt tells you which checks passed so you can work the gaps.
Scored something you believe is correct? Use Report an issue on this page — that is exactly how the grading fixes in the changelog got found.

Included with a subscription.

Found a problem with this lab?

Please sign in to report a problem — tying it to your attempts lets us reproduce and fix it faster.