An enterprise has several sites with multiple VPNs that are isolated from each other. A new requirement came where users in VPN 73 must be able to talk to users in VPN 50. Which configuration meets this requirement?

Question

Accepted Answer

A. policy control-policy Route_Leaking sequence 1 match route vpn-list VPN_73 prefix-list_AnyIpv4PrefixList action accept export-to vpn-list VPN_50 sequence 11 match route vpn-list VPN_50 prefix-list_AnyIpv4PrefixList action accept export-to vpn-list VPN_73 default-action accept To achieve bidirectional communication between previously isolated VPNs (VPN 73 and VPN 50), routes must be leaked between them using a centralized control policy. This configuration correctly defines a control policy with two sequences: one to match routes from VPN 73 and export them to VPN 50, and another to match routes from VPN 50 and export them to VPN 73, ensuring mutual reachability.

Answer

B. policy control-policy Route_Leaking sequence 1 match route VPN_50 VPN_73 prefix-list_AnyIpv4PrefixList action accept export-to VPN_73 VPN_50 This configuration attempts to match multiple VPNs and export to multiple VPNs in single statements, which is syntactically incorrect for specifying bidirectional route leaking between specific VPNs.

Answer

C. policy control-policy Route_Leaking sequence 1 match route VPN_ALL prefix-list_AnyIpv4PrefixList action accept export-to VPN_ALL

Answer

D. policy control-policy Route_Leaking sequence 1 match route VPN_73 prefix-list_AnyIpv4PrefixList export-to VPN_50 sequence 11 match route VPN_50 prefix-list_AnyIpv4PrefixList export-to VPN_73 default-action accept

An enterprise has several sites with multiple VPNs that are isolated from each other. A new requirement came where users in VPN 73 must be able to talk to users in VPN 50. Which configuration meets…

Question

Options

How the community answered

Why each option

Topics

Community Discussion