300-620 · Question #148
A bridge domain for an EPC called "Web Servers" must be created in the Cisco APIC. The configuration must meet these requirements: - Only traffic to known Mac addresses must be allowed to reduce…
The correct answer is B. Set L2 Unknown Unicast to Hardware Proxy. To create a bridge domain that limits unknown unicast traffic to known MAC addresses and restricts multicast, the L2 Unknown Unicast must be set to Hardware Proxy.
Question
A bridge domain for an EPC called "Web Servers" must be created in the Cisco APIC. The configuration must meet these requirements:
- Only traffic to known Mac addresses must be allowed to reduce noice.
- The multicast traffic must be limited to the ports that are
participating in multicast routing.
- The endpoints within the bridge domain must be kept in the endpoint
table for 20 minultes without any updates. Which set of steps configures the bridge domain that satisfies the requirements?
Options
- ASelect the ARP Flooding checkbox.
- BSet L2 Unknown Unicast to Hardware Proxy.
- CSwitch L2 Unknown Unicast to Flood.
- DMulticast Destination Flooding should be set to Flood in BD.
How the community answered
(27 responses)- A7% (2)
- B70% (19)
- C4% (1)
- D19% (5)
Why each option
To create a bridge domain that limits unknown unicast traffic to known MAC addresses and restricts multicast, the L2 Unknown Unicast must be set to Hardware Proxy.
Selecting ARP Flooding allows ARP requests to be flooded throughout the bridge domain, which contradicts the goal of reducing noise by limiting traffic to known MAC addresses.
Setting L2 Unknown Unicast to Hardware Proxy in a bridge domain ensures that traffic destined for unknown MAC addresses is sent to the spine proxy, which then resolves the destination. This prevents flooding of unknown unicast traffic within the BD, thereby reducing noise and limiting traffic to only known MAC addresses. This setting also facilitates limiting multicast traffic to participating ports.
Switching L2 Unknown Unicast to Flood means that traffic to unknown MAC addresses will be flooded across all ports in the bridge domain, directly opposing the requirement to only allow traffic to known MAC addresses and reduce noise.
Setting Multicast Destination Flooding to Flood would allow multicast traffic to be flooded to all ports within the BD, which contradicts the requirement to limit multicast traffic to only participating ports.
Concept tested: Cisco ACI Bridge Domain Unicast and Multicast Handling
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/6x/config/fabric/cisco-aci-fabric-configuration-guide-60x/m-bridge-domains.html
Topics
Community Discussion
No community discussion yet for this question.