nerdexam
Cisco

300-620 · Question #148

A bridge domain for an EPC called "Web Servers" must be created in the Cisco APIC. The configuration must meet these requirements: - Only traffic to known Mac addresses must be allowed to reduce…

The correct answer is B. Set L2 Unknown Unicast to Hardware Proxy. To create a bridge domain that limits unknown unicast traffic to known MAC addresses and restricts multicast, the L2 Unknown Unicast must be set to Hardware Proxy.

ACI Fabric Infrastructure

Question

A bridge domain for an EPC called "Web Servers" must be created in the Cisco APIC. The configuration must meet these requirements:

  • Only traffic to known Mac addresses must be allowed to reduce noice.
  • The multicast traffic must be limited to the ports that are

participating in multicast routing.

  • The endpoints within the bridge domain must be kept in the endpoint

table for 20 minultes without any updates. Which set of steps configures the bridge domain that satisfies the requirements?

Options

  • ASelect the ARP Flooding checkbox.
  • BSet L2 Unknown Unicast to Hardware Proxy.
  • CSwitch L2 Unknown Unicast to Flood.
  • DMulticast Destination Flooding should be set to Flood in BD.

How the community answered

(27 responses)
  • A
    7% (2)
  • B
    70% (19)
  • C
    4% (1)
  • D
    19% (5)

Why each option

To create a bridge domain that limits unknown unicast traffic to known MAC addresses and restricts multicast, the L2 Unknown Unicast must be set to Hardware Proxy.

ASelect the ARP Flooding checkbox.

Selecting ARP Flooding allows ARP requests to be flooded throughout the bridge domain, which contradicts the goal of reducing noise by limiting traffic to known MAC addresses.

BSet L2 Unknown Unicast to Hardware Proxy.Correct

Setting L2 Unknown Unicast to Hardware Proxy in a bridge domain ensures that traffic destined for unknown MAC addresses is sent to the spine proxy, which then resolves the destination. This prevents flooding of unknown unicast traffic within the BD, thereby reducing noise and limiting traffic to only known MAC addresses. This setting also facilitates limiting multicast traffic to participating ports.

CSwitch L2 Unknown Unicast to Flood.

Switching L2 Unknown Unicast to Flood means that traffic to unknown MAC addresses will be flooded across all ports in the bridge domain, directly opposing the requirement to only allow traffic to known MAC addresses and reduce noise.

DMulticast Destination Flooding should be set to Flood in BD.

Setting Multicast Destination Flooding to Flood would allow multicast traffic to be flooded to all ports within the BD, which contradicts the requirement to limit multicast traffic to only participating ports.

Concept tested: Cisco ACI Bridge Domain Unicast and Multicast Handling

Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/6x/config/fabric/cisco-aci-fabric-configuration-guide-60x/m-bridge-domains.html

Topics

#bridge domain#L2 unknown unicast#hardware proxy#endpoint retention

Community Discussion

No community discussion yet for this question.

Full 300-620 Practice