nerdexam
Cisco

300-620 · Question #131

An engineer must configure a group of servers with a contract that uses TCP port 80. The EGP that contains the web servers requires an external Layer 3 cloud to initiate communication. Which action…

The correct answer is A. Configure the EGP as a provider and L3 out as consumer of the contract. To allow an external Layer 3 cloud to initiate communication to web servers within an EPG on TCP port 80, the EPG must be configured as the provider of the contract and the L3Out as the consumer. This setup ensures that the external network can access the services offered by…

External Network Connectivity

Question

An engineer must configure a group of servers with a contract that uses TCP port 80. The EGP that contains the web servers requires an external Layer 3 cloud to initiate communication. Which action must be taken to meet these requirements?

Options

  • AConfigure the EGP as a provider and L3 out as consumer of the contract.
  • BConfigure OSPF to exchange routes between the L3 out and EGP.
  • CConfigure a taboo contract and apply it to the EPG.
  • DConfigure the EPG as a consumer and L3 out as a provider of the contract.

How the community answered

(33 responses)
  • A
    82% (27)
  • B
    3% (1)
  • C
    9% (3)
  • D
    6% (2)

Why each option

To allow an external Layer 3 cloud to initiate communication to web servers within an EPG on TCP port 80, the EPG must be configured as the provider of the contract and the L3Out as the consumer. This setup ensures that the external network can access the services offered by the EPG.

AConfigure the EGP as a provider and L3 out as consumer of the contract.Correct

Since the EPG contains the web servers that offer a service (TCP port 80) and the external Layer 3 cloud needs to initiate communication to these servers, the EPG is the provider of the service. Consequently, the L3Out, representing the external cloud, must be configured as the consumer of that contract to allow the traffic flow into the ACI fabric.

BConfigure OSPF to exchange routes between the L3 out and EGP.

OSPF exchanges routes, but it does not define or enforce communication policies like allowing specific TCP ports between EPGs and L3Outs; that is the function of contracts.

CConfigure a taboo contract and apply it to the EPG.

A taboo contract explicitly denies communication, which is the opposite of the requirement to allow communication to TCP port 80.

DConfigure the EPG as a consumer and L3 out as a provider of the contract.

Configuring the EPG as a consumer and L3Out as a provider would mean the EPG initiates communication to services provided by the external cloud, which contradicts the requirement for the external cloud to initiate communication to the web servers.

Concept tested: ACI contract consumer/provider roles with L3Out

Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/sw/security/b-cisco-aci-security-config-guide-501/m-contract-configuration-between-l3out-and-epg.html

Topics

#contract#EPG#L3Out#consumer/provider

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-620 Practice