Which of these is true regarding tunnel configuration when deploying a Cisco ISR as a DMVPN hub router?