Which capabilities are required to leverage a local Internet model where user web traffic and hosted cloud services traffic are permitted to use the local Internet link in a split- tunneling manner…

The correct answer is D. All of the above. All three capabilities are required together for a local Internet (split-tunnel) model. NAT/PAT translates private IP addresses to public ones for Internet-bound traffic exiting the local link. The Front Door VRF (FVRF) separates the Internet-facing routing instance from the…

Advanced WAN Services

Question

Which capabilities are required to leverage a local Internet model where user web traffic and hosted cloud services traffic are permitted to use the local Internet link in a split- tunneling manner as part of a VPN overlay design?

Options

ANAT/PAT
BFront door VRF
CDefault route out of interface and pointing to INET PE next hop
DAll of the above

How the community answered

(58 responses)

A
3% (2)
B
10% (6)
C
3% (2)
D
83% (48)

Explanation

All three capabilities are required together for a local Internet (split-tunnel) model. NAT/PAT translates private IP addresses to public ones for Internet-bound traffic exiting the local link. The Front Door VRF (FVRF) separates the Internet-facing routing instance from the VPN tunnel routing instance, preventing routing loops when the tunnel and its transport share the same router. A default route pointing to the INET PE next hop ensures that Internet-destined traffic is forwarded correctly out the local Internet link rather than into the VPN tunnel. Omitting any one of these three breaks the design.

Topics

#local Internet model#split tunneling#VPN overlay#front door VRF

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice