300-420 · Question #413
Refer to the exhibit. An enterprise uses dual-homed MPLS connectivity for critical branch locations and single-homed MPLS connectivity for smaller, less essential branch sites. Against the…
The correct answer is C. BGP as-path filter within Branch A to advertise locally originated prefixes only. A BGP as-path filter on Branch A that only advertises its own locally originated prefixes prevents Branch A from becoming a transit path for Branch B’s traffic to HQ during MPLS2 failure. This enforces policy and eliminates the undesired traffic flow.
Question
Refer to the exhibit. An enterprise uses dual-homed MPLS connectivity for critical branch locations and single-homed MPLS connectivity for smaller, less essential branch sites. Against the enterprise security policy, Branch A experiences traffic flow from Branch B toward HQ when the MPLS2 network fails. Which technique resolves this issue?
Exhibit
Options
- ABGP prepending on Branch A router toward the MPLS2 network
- BACLs on Branch A routers that block Branch B traffic toward HQ
- CBGP as-path filter within Branch A to advertise locally originated prefixes only
- DACL on Branch B router that blocks Branch B traffic toward Branch A
How the community answered
(46 responses)- A7% (3)
- B15% (7)
- C74% (34)
- D4% (2)
Explanation
A BGP as-path filter on Branch A that only advertises its own locally originated prefixes prevents Branch A from becoming a transit path for Branch B’s traffic to HQ during MPLS2 failure. This enforces policy and eliminates the undesired traffic flow.
Topics
Community Discussion
No community discussion yet for this question.