Refer to the exhibit, which shows an ADVPN network.

In an ADVPN (Auto-Discovery VPN) network, a dynamic VPN tunnel is established on-demand between spokes to optimize traffic flow and reduce latency.

Process:

1. Traffic Initiation:

A client behind Spoke-1 sends traffic to a device behind Spoke-2.

The traffic initially flows through the hub, following the pre-established overlay tunnel.

2. Hub Detection:

The hub detects that Spoke-1 is communicating with Spoke-2 and determines that a direct shortcut tunnel between the spokes can optimize the connection.

3. Shortcut Offer:

The hub sends a " Shortcut Offer " message to Spoke-1, informing it that a direct dynamic tunnel to Spoke-2 is possible.

4. Tunnel Establishment:

Spoke-1 and Spoke-2 then negotiate and establish a direct IPsec tunnel for communication.