nerdexam
Cisco

300-415 · Question #282

Which configuration on the WAN Edge meets the requirement?

The correct answer is A. vpn 0 router eigrp address-family ipv4-unicast maximum-path paths 4 network 10.0.0.0/28 redistribute omp interface ge0/0 description "**"Internet Circuit"**" ip address 209.165.200.229/30 tunnel-interface encapsulation ipsec color public-internet allow-service all vpn 512 interface eth0 shutdown. This configuration correctly sets up VPN 0 for WAN connectivity with an internet circuit and IPsec tunnel, enables EIGRP on a LAN segment to redistribute OMP routes, and shuts down the interface in VPN 512.

WAN Edge Router Deployment

Question

Which configuration on the WAN Edge meets the requirement?

Exhibit

300-415 question #282 exhibit

Options

  • Avpn 0 router eigrp address-family ipv4-unicast maximum-path paths 4 network 10.0.0.0/28 redistribute omp interface ge0/0 description ""Internet Circuit"" ip address 209.165.200.229/30 tunnel-interface encapsulation ipsec color public-internet allow-service all vpn 512 interface eth0 shutdown
  • Bvpn0 vpn1 interface ge0/0 description ""Internet Circuit"" ip address 209.165.200.229/30 tunnel-interface encapsulation ipsec color public-internet allow-service all router eigrp address-family ipv4-unicast maximum-path paths 4 network 10.0.0.0/28 redistribute omp interface ge0/1 ip address 10.0.0.1/28 vpn 512 interface eth0 shutdown
  • Cvpn0 interface ge0/0 description ""Internet Circuit"" ip address 209.165.200.229/30 tunnel-interface encapsulation ipsec color public-internet allow-service all router eigrp address-family ipv4-unicast maximum-path paths 4 network 10.0.0.0/28 redistribute omp vpn 512 interface eth0 shutdown
  • D

How the community answered

(20 responses)
  • A
    75% (15)
  • B
    5% (1)
  • C
    15% (3)
  • D
    5% (1)

Why each option

This configuration correctly sets up VPN 0 for WAN connectivity with an internet circuit and IPsec tunnel, enables EIGRP on a LAN segment to redistribute OMP routes, and shuts down the interface in VPN 512.

Avpn 0 router eigrp address-family ipv4-unicast maximum-path paths 4 network 10.0.0.0/28 redistribute omp interface ge0/0 description "**"Internet Circuit"**" ip address 209.165.200.229/30 tunnel-interface encapsulation ipsec color public-internet allow-service all vpn 512 interface eth0 shutdownCorrect

This configuration correctly establishes the WAN interface ge0/0 within VPN 0, enabling it as a tunnel interface with IPsec encapsulation and specifying its color. It also correctly configures EIGRP within VPN 0 to advertise the 10.0.0.0/28 network and redistributes OMP routes into EIGRP, allowing LAN routes to be shared across the SD-WAN fabric. Finally, it correctly shuts down the interface eth0 in VPN 512.

Bvpn0 vpn1 interface ge0/0 description "**"Internet Circuit"**" ip address 209.165.200.229/30 tunnel-interface encapsulation ipsec color public-internet allow-service all router eigrp address-family ipv4-unicast maximum-path paths 4 network 10.0.0.0/28 redistribute omp interface ge0/1 ip address 10.0.0.1/28 vpn 512 interface eth0 shutdown

This option has a "vpn0 vpn1" at the beginning which is syntactically incorrect; VPN definitions should be distinct blocks. It also places the EIGRP configuration outside of any specific VPN context, which is incorrect as routing protocols operate within a VPN.

Cvpn0 interface ge0/0 description "**"Internet Circuit"**" ip address 209.165.200.229/30 tunnel-interface encapsulation ipsec color public-internet allow-service all router eigrp address-family ipv4-unicast maximum-path paths 4 network 10.0.0.0/28 redistribute omp vpn 512 interface eth0 shutdown

This option correctly defines VPN 0 and its internet interface, but the EIGRP configuration is placed at the global `vpn0` level instead of being explicitly under `router eigrp` within `vpn 0`, which is the standard way to configure routing protocols within a VPN context.

D

This option is empty, thus incorrect.

Concept tested: Cisco SD-WAN WAN Edge VPN configuration, EIGRP redistribution

Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-cr-book/sdwan-config-guide.html

Topics

#WAN Edge configuration#VPN 0 transport#Tunnel interface#EIGRP routing

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice