300-170 · Question #141
Which statement describes an endpoint retention policy behaviour of learned endpoints when subnets of a bridge domain are configured to be enforced?
The correct answer is A. It removes learned endpoints from the endpoint retention cache when a remote device times out. When bridge domain subnets are configured for enforcement, the endpoint retention policy will remove learned endpoints from the cache if a remote device times out.
Question
Which statement describes an endpoint retention policy behaviour of learned endpoints when subnets of a bridge domain are configured to be enforced?
Options
- AIt removes learned endpoints from the endpoint retention cache when a remote device times out
- BIt retains the IP Addresses of the learned endpoint contained outside the bridge subnets
- CIt retains policy information about remote endpoints by using the leaf switches
How the community answered
(38 responses)- A95% (36)
- B3% (1)
- C3% (1)
Why each option
When bridge domain subnets are configured for enforcement, the endpoint retention policy will remove learned endpoints from the cache if a remote device times out.
If subnets of a bridge domain are configured to be enforced, the endpoint retention policy actively removes learned endpoints from the endpoint retention cache when a remote device's activity times out. This mechanism ensures that only currently active and valid endpoints within the defined IP subnets are maintained in the ACI fabric's endpoint tables, enhancing network hygiene and security.
Enforcing subnets typically implies that endpoints with IP addresses outside the configured bridge subnets would be considered invalid or unauthorized and thus would not be retained.
While leaf switches handle endpoint learning, the statement focuses on retaining policy information, which is a broader concept than the specific behavior of removing timed-out endpoints under subnet enforcement.
Concept tested: ACI Endpoint Retention Policy with enforced subnets
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/l3-configuration/cisco-aci-layer3-configuration-guide-50x/m_configuring_bridge_domain.html
Topics
Community Discussion
No community discussion yet for this question.