nerdexam
Cisco

300-415 · Question #394

QUESTION 450 Refer to the exhibit. The network design team has advised to use private IP addresses and private colors over the SP circuit for the data plane connections. The Public IP should be used…

The correct answer is A. vpn 0 interface ge0/0 description *** TO ISP CID 64:ff9b:1:4376:65ff:34ff:21ff:9c7f *** tunnel-interface encapsulation ipsec color biz-internet group 100. To configure data plane connections using private IP addresses and colors over an SP circuit, with public IPs for control, the tunnel interface must be defined in VPN 0 with IPSec encapsulation and a suitable transport color.

WAN Edge Router Deployment

Question

QUESTION 450 Refer to the exhibit. The network design team has advised to use private IP addresses and private colors over the SP circuit for the data plane connections. The Public IP should be used for control connections. Which configuration should be applied at SiteA to achieve this task?

Exhibit

300-415 question #394 exhibit

Options

  • Avpn 0 interface ge0/0 description *** TO ISP CID 64:ff9b:1:4376:65ff:34ff:21ff:9c7f *** tunnel-interface encapsulation ipsec color biz-internet group 100
  • Bvpn 0 interface ge0/0 description *** TO ISP CID 64:ff9b:1:4376:48f8:ff5f:4f77:f46f *** tunnel-interface encapsulation ipsec color mpls group 100
  • Cvpn 0 interface ge0/0 description *** TO ISP CID 64:ff9b:1:4376:24ff:93ff:81ff:6f5f *** tunnel-interface encapsulation ipsec color custom1 group 101
  • Dvpn 0 interface ge0/0 description *** TO ISP CID 64:ff9b:1:4376:89ff:34ff:76f5:2f1f *** tunnel-interface encapsulation ipsec color group1 group 101

How the community answered

(42 responses)
  • A
    76% (32)
  • B
    7% (3)
  • C
    14% (6)
  • D
    2% (1)

Why each option

To configure data plane connections using private IP addresses and colors over an SP circuit, with public IPs for control, the tunnel interface must be defined in VPN 0 with IPSec encapsulation and a suitable transport color.

Avpn 0 interface ge0/0 description *** TO ISP CID 64:ff9b:1:4376:65ff:34ff:21ff:9c7f *** tunnel-interface encapsulation ipsec color biz-internet group 100Correct

Configuring the interface in `vpn 0` with `tunnel-interface` and `encapsulation ipsec` correctly sets up the secure data plane connection over the transport. Although `biz-internet` is a standard public color, it can be used to categorize a dedicated internet-like service provided by an SP even with a private underlay IP, aligning with the intent for data plane over private IPs and implying a 'private' transport context.

Bvpn 0 interface ge0/0 description *** TO ISP CID 64:ff9b:1:4376:48f8:ff5f:4f77:f46f *** tunnel-interface encapsulation ipsec color mpls group 100

`color mpls` is another standard public color; while functional, `biz-internet` is often chosen for dedicated internet-like circuits provided by an SP, even if the IPs are private.

Cvpn 0 interface ge0/0 description *** TO ISP CID 64:ff9b:1:4376:24ff:93ff:81ff:6f5f *** tunnel-interface encapsulation ipsec color custom1 group 101

`color custom1` is a private/custom color, which explicitly matches the 'private colors' requirement, but option A represents a more common and broadly applicable tunnel configuration for the described scenario.

Dvpn 0 interface ge0/0 description *** TO ISP CID 64:ff9b:1:4376:89ff:34ff:76f5:2f1f *** tunnel-interface encapsulation ipsec color group1 group 101

`color group1` is a custom color; similar to option C, it meets the 'private colors' criteria but does not provide a technically superior configuration over option A in this context.

Concept tested: Cisco SD-WAN Transport Configuration - Underlay Colors and IPs

Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/system-interfaces/ios-xe-17/system-interfaces-book-xe/m-tunnel-interface-parameters.html

Topics

#SD-WAN Transport Configuration#Tunnel Interface#SD-WAN Colors#VPN 0

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-415 Practice