nerdexam
Cisco

300-610 · Question #234

A Cisco engineer is configuring a customer design scenario that consists of Cisco Nexus 7000 series switches. The remote management access of all the Layer 2 switches is configured on a specific…

The correct answer is B. Configure VLAN 12 on the switch, and add it to the mgmt VRF. To configure the Nexus 3064 to use VLAN 12 for management within the mgmt VRF, the engineer must configure VLAN 12 on the switch and add its SVI to the management VRF.

Data Center Network Design

Question

A Cisco engineer is configuring a customer design scenario that consists of Cisco Nexus 7000 series switches. The remote management access of all the Layer 2 switches is configured on a specific VLAN 12, with subnet 10.0.12.0/24. The route goes through a firewall that has rules to restrict traffic to/from VLAN 12. The engineer is adding a Nexus 3064 with the primary use as a core router for the VLANs. How must the engineer specify the management VRF to use VLAN 12 for management so it is on the same subnet as the rest of the LAN switches?

Options

  • AThe L3 SVI on the switch must not accept management traffic.
  • BConfigure VLAN 12 on the switch, and add it to the mgmt VRF.
  • CPlug the physical management interface into an access port on VLAN 12.
  • DCreate SVI, add management to a new VRF, and keep it in global

How the community answered

(18 responses)
  • B
    83% (15)
  • C
    11% (2)
  • D
    6% (1)

Why each option

To configure the Nexus 3064 to use VLAN 12 for management within the `mgmt` VRF, the engineer must configure VLAN 12 on the switch and add its SVI to the management VRF.

AThe L3 SVI on the switch must not accept management traffic.

The L3 SVI on the switch must accept management traffic if it is to be used for in-band management, so this choice contradicts the objective.

BConfigure VLAN 12 on the switch, and add it to the mgmt VRF.Correct

To use VLAN 12 for in-band management and isolate it within the management VRF on a Cisco Nexus switch, an SVI for VLAN 12 must be configured and then explicitly bound to the `mgmt` VRF. This allows management traffic for that VLAN to be routed within the isolated VRF, matching the existing management subnet.

CPlug the physical management interface into an access port on VLAN 12.

Plugging the physical management interface into an access port on VLAN 12 uses the dedicated out-of-band management interface, which is separate from in-band data plane and management VRF configuration.

DCreate SVI, add management to a new VRF, and keep it in global

Creating an SVI and adding management to a *new* VRF while keeping it in global is contradictory and does not align with placing the SVI for VLAN 12 into the standard `mgmt` VRF.

Concept tested: Cisco Nexus in-band management VRF configuration

Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/system_management/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_System_Management_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_System_Management_Configuration_Guide_7x_chapter_010.html#id_36750

Topics

#Cisco Nexus#management VRF#VLAN#SVI#network management

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-610 Practice