nerdexam
Cisco

300-415 · Question #290

An engineer must configure VRRP for redundancy on WAN Edge router 1 running an earlier version than 20.6, considering WAN Edge router2 is configured correctly. Which configuration meets the…

The correct answer is D. vpn 0 interface ge0/6 mtu 1500 vpn 177 ! interface ge0/6.2 ip address 10.2.2.3/24 no shutdown vrrp 2 ipv4 10.2.2.1 track-prefix-list vrrp-prefix-list1 ! interface ge0/6.3 ip address 10.2.3.5/24 no shutdown vrrp 3 ipv4 10.2.3.11 track-prefix-list vrrp-prefix-list1. The configuration correctly applies VRRP to sub-interfaces within VPN 177, providing gateway redundancy for LAN-side devices on WAN Edge router 1, while the main physical interface ge0/6 is placed in VPN 0 for transport.

WAN Edge Router Deployment

Question

An engineer must configure VRRP for redundancy on WAN Edge router 1 running an earlier version than 20.6, considering WAN Edge router2 is configured correctly. Which configuration meets the requirement?

Options

  • Avpn 177 interface ge0/6 mtu 1500 vpn 177 ! interface ge0/6.2 ip address 10.2.2.3/24 no shutdown vrrp 2 ipv4 10.2.2.1 track-prefix-list vrrp-prefix-list1 ! interface ge0/6.3 ip address 10.2.3.5/24 no shutdown vrrp 3 ipv4 10.2.3.11 track-prefix-list vrrp-prefix-list1
  • Bvpn 0 interface ge0/6 mtu 1500 vpn 177 ! interface ge0/6.2 ip address 10.2.2.3/24 no shutdown vrrp 2 ipv4 10.2.2.1 track-prefix-list vrrp-prefix-list1 ! interface ge0/6.3 ip address 10.2.3.5/24 no shutdown vrrp 3 ipv4 10.2.3.11 track-prefix-list vrrp-prefix-list1
  • Cvpn 177 interface ge0/6 mtu 1504 vpn 177 ! interface ge0/6.2 ip address 10.2.2.3/24 no shutdown vrrp 2 ipv4 10.2.2.1 track-prefix-list vrrp-prefix-list1 ! interface ge0/6.3 ip address 10.2.3.5/24 no shutdown vrrp 3 ipv4 10.2.3.11 track-prefix-list vrrp-prefix-list1
  • Dvpn 0 interface ge0/6 mtu 1500 vpn 177 ! interface ge0/6.2 ip address 10.2.2.3/24 no shutdown vrrp 2 ipv4 10.2.2.1 track-prefix-list vrrp-prefix-list1 ! interface ge0/6.3 ip address 10.2.3.5/24 no shutdown vrrp 3 ipv4 10.2.3.11 track-prefix-list vrrp-prefix-list1

How the community answered

(45 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    11% (5)
  • D
    82% (37)

Why each option

The configuration correctly applies VRRP to sub-interfaces within VPN 177, providing gateway redundancy for LAN-side devices on WAN Edge router 1, while the main physical interface ge0/6 is placed in VPN 0 for transport.

Avpn 177 interface ge0/6 mtu 1500 vpn 177 ! interface ge0/6.2 ip address 10.2.2.3/24 no shutdown vrrp 2 ipv4 10.2.2.1 track-prefix-list vrrp-prefix-list1 ! interface ge0/6.3 ip address 10.2.3.5/24 no shutdown vrrp 3 ipv4 10.2.3.11 track-prefix-list vrrp-prefix-list1

This option places the physical interface `ge0/6` directly into `vpn 177`, which is generally incorrect as physical WAN interfaces are typically associated with `vpn 0` for transport, with service VPNs configured on sub-interfaces.

Bvpn 0 interface ge0/6 mtu 1500 vpn 177 ! interface ge0/6.2 ip address 10.2.2.3/24 no shutdown vrrp 2 ipv4 10.2.2.1 track-prefix-list vrrp-prefix-list1 ! interface ge0/6.3 ip address 10.2.3.5/24 no shutdown vrrp 3 ipv4 10.2.3.11 track-prefix-list vrrp-prefix-list1

This option is identical to option D and correctly implements the VRRP configuration. Assuming distinct options are intended, D is the designated correct choice.

Cvpn 177 interface ge0/6 mtu 1504 vpn 177 ! interface ge0/6.2 ip address 10.2.2.3/24 no shutdown vrrp 2 ipv4 10.2.2.1 track-prefix-list vrrp-prefix-list1 ! interface ge0/6.3 ip address 10.2.3.5/24 no shutdown vrrp 3 ipv4 10.2.3.11 track-prefix-list vrrp-prefix-list1

Similar to option A, this option incorrectly places the physical interface `ge0/6` into `vpn 177` instead of `vpn 0`, and also specifies an MTU of 1504 which is less common for a standard Ethernet interface than 1500.

Dvpn 0 interface ge0/6 mtu 1500 vpn 177 ! interface ge0/6.2 ip address 10.2.2.3/24 no shutdown vrrp 2 ipv4 10.2.2.1 track-prefix-list vrrp-prefix-list1 ! interface ge0/6.3 ip address 10.2.3.5/24 no shutdown vrrp 3 ipv4 10.2.3.11 track-prefix-list vrrp-prefix-list1Correct

This configuration correctly establishes VRRP on `ge0/6.2` and `ge0/6.3` within `vpn 177`, which is the standard method for providing LAN-side gateway redundancy for clients in a service VPN. The physical interface `ge0/6` is correctly placed in `vpn 0`, typically for WAN transport, making the overall structure appropriate for SD-WAN deployments needing VRRP for local redundancy.

Concept tested: Cisco SD-WAN VRRP configuration

Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/sdwan-xe-gs-book_chapter_01.html

Topics

#VRRP#WAN Edge Configuration#SD-WAN VPNs#Interface Configuration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-415 Practice