Cisco
300-415 · Question #424
Refer to the exhibit. A customer wants to deploy service insertion at site 1, in which traffic from VPN 10 must route to this site through a firewall. A policy must be in place to route VPN 10 traffic
Sign in or unlock 300-415 to reveal the answer and full explanation for question #424. The question stem and answer options stay visible for context.
Policies
Question
Refer to the exhibit. A customer wants to deploy service insertion at site 1, in which traffic from VPN 10 must route to this site through a firewall. A policy must be in place to route VPN 10 traffic from all sites toward this firewall. Which configuration must be on the vSmart controller to meet this requirement?
Exhibit
Options
- Apolicy lists site-list Site-1 site-id 1 control-policy firewall-service sequence 10 match route vpn 10 action accept set service FW apply-policy site-list device-1 control-policy custom-firewall-service out
- Bpolicy control-policy FW_Policy sequence 1 match route vpn-list vpn-prefix-list_anyIpv4PrefixList action accept export-to vpn-list VPN10-VPN20 set service netsvc1 default-action reject apply-policy site-list Site1 control-policy FW_Policy out
- Cpolicy list site-list Site-1 site-id 1 vpn-list vpn-10 vpn 10 data-policy FW-policy vpn-list vpn-10 sequence 1 match ip-destination 10.1.1.0/24 action accept set nexthop 10.0.0.2 apply-policy site-list Hub-1 data-policy netsvc1-policy
- Dpolicy data-policy_VPN_10_FW vpn-list VPN_10 sequence 1 match ip-destination-ip 10.1.1.0/24 action accept set tloc tloc 10.10.10.1 color mpls encap ipsec default-action drop apply-policy site-list Site1 data-policy_VPN_10_FW from-service
Unlock 300-415 to see the answer
You've previewed enough free 300-415 questions. Unlock 300-415 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#SD-WAN Policies#Service Insertion#Data Policy#vSmart Configuration