300-420 · Question #372
What is the purpose of the fabric control plane in a Cisco SD-Access architecture?
The correct answer is A. create and resolve endpoint-to-location mapping. The primary purpose of the fabric control plane in Cisco SD-Access is to create and resolve endpoint-to-location mappings using LISP, enabling seamless mobility and scalable routing.
Question
What is the purpose of the fabric control plane in a Cisco SD-Access architecture?
Options
- Acreate and resolve endpoint-to-location mapping
- Bcreate a transit node with BGP route reflector functionality
- Cextend multiple subnets to one RLOC
- Dcreate, propagate, and enforce GBAC policies in the fabric
How the community answered
(21 responses)- A86% (18)
- B10% (2)
- C5% (1)
Why each option
The primary purpose of the fabric control plane in Cisco SD-Access is to create and resolve endpoint-to-location mappings using LISP, enabling seamless mobility and scalable routing.
In a Cisco SD-Access architecture, the fabric control plane, powered by LISP (Locator/ID Separation Protocol), is responsible for maintaining the Host Tracking Database (HTDB). This database stores and resolves endpoint-to-location mappings (EID-to-RLOC mappings), allowing the fabric to efficiently locate and route traffic to endpoints regardless of their physical location within the fabric, thus enabling mobility and simplified routing.
While BGP route reflectors might be used in the underlay for scale, creating a transit node with BGP route reflector functionality is an underlay routing concern, not the primary purpose of the fabric control plane (which is LISP-based).
Extending multiple subnets to one RLOC (Routing Locator) is a characteristic of LISP's operation, where multiple EIDs (Endpoint Identifiers) can map to a single RLOC, but it's a detail of how the mapping works rather than the overarching purpose of the control plane.
Group-Based Access Control (GBAC) policies are created and managed by Cisco DNA Center, and enforced by the fabric edge nodes and border nodes using Security Group Tags (SGTs), not directly by the LISP-based fabric control plane which focuses on location mapping.
Concept tested: Cisco SD-Access control plane, LISP, endpoint mapping
Source: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Campus/sda_design_guide/sda_design_guide.html
Topics
Community Discussion
No community discussion yet for this question.