An ISP provides a major client MPLS VPN for managed services. The MPLS engineering team needs to use the advanced VPN feature of selective VRF import so that only specific prefixes are present in the

Question

Options

• AA route must pass the import route map first and then the route target import filter.
• BThe routers that are imported in the VRF can be BGP and IGP routes, so other match conditions
• CThe import-map command is applied under the PE interface that connects to the CE router.
• DA route is imported into the VRF only when at least one RT that is attached to the route matches

• A
  14% (7)
• B
  4% (2)
• C
  8% (4)
• D
  73% (36)

Explanation

Option D captures the foundational rule of MPLS VPN route import: regardless of any additional filtering via an import route map, a route can only be considered for import into a VRF if at least one of its attached Route Targets (RTs) matches an RT configured in the VRF's import policy. Selective VRF import adds a route map as a second filter on top of RT matching - it does not replace it.

Why the distractors are wrong:

• A reverses the order of operations. In selective VRF import, the RT filter is evaluated first; only routes that pass the RT check are then evaluated against the import route map. Swapping this order misrepresents how the feature works.
• B is misleading because the selective VRF import feature (using import map) only applies to BGP-learned VPNv4/v6 routes. IGP routes redistributed into BGP may be involved, but the match conditions in the route map are applied to BGP attributes, not IGP routing information directly - making this an incomplete and inaccurate framing.
• C is wrong because the import map command is configured under the VRF definition (e.g., vrf definition VRF_NAME → import map ROUTE_MAP), not under the PE-CE interface.

Memory tip: Think of selective VRF import as a two-door bouncer - the RT must get you past the first door before the route map decides at the second door. If the RT doesn't match, the route never even reaches the route map check.

No community discussion yet for this question.