300-615 · Question #278
Refer to the exhibit. Two Cisco ASA firewalls are configured in an active/standby cluster with eBGP in VXLAN fabric. The BGP routes are dropped and failed to install inside the BGP table of Inside…
The correct answer is A. On Leaf3, add local-as 65102 no-prepend replace-as to bgp Outside VRF. With an ASA active/standby BGP cluster you must use the "cluster‐AS" feature so each leaf presents a unique sub‐AS to suppress loop prevention. Leaf3 already uses local-as 65101 for its INSIDE peer, so it needs local-as 65102 no-prepend replace-as under the OUTSIDE neighbor…
Question
Refer to the exhibit. Two Cisco ASA firewalls are configured in an active/standby cluster with eBGP in VXLAN fabric. The BGP routes are dropped and failed to install inside the BGP table of Inside and Outside VRFs. Which set of actions resolve the issue?
Exhibits
Options
- AOn Leaf3, add local-as 65102 no-prepend replace-as to bgp Outside VRF.
- BOn Leaf3, add local-as 65100 no-prepend replace-as to bgp Outside VRF.
- COn Leaf3, add local-as 65000 no-prepend replace-as to bgp Outside VRF.
- DOn Leaf3, add local-as 65101 no-prepend replace-as to bgp Outside VRF.
How the community answered
(65 responses)- A72% (47)
- B14% (9)
- C5% (3)
- D9% (6)
Explanation
With an ASA active/standby BGP cluster you must use the "cluster‐AS" feature so each leaf presents a unique sub‐AS to suppress loop prevention. Leaf3 already uses local-as 65101 for its INSIDE peer, so it needs local-as 65102 no-prepend replace-as under the OUTSIDE neighbor. Likewise, Leaf4 needs local-as 65101 no-prepend replace-as under its INSIDE neighbor. This completes the cluster‐AS pairing and allows the routes to install.
Topics
Community Discussion
No community discussion yet for this question.