nerdexam
Cisco

300-620 · Question #234

Refer to the exhibit. The VMs called VM1 and VM2 are deployed on the ESXi Server in a Cisco ACI environment. VM1 has MAC address A and an IP address 192.168.1.1/24, and VM2 has MAC address B. VM1…

The correct answer is D. Enable ARP flooding. GARP is used to update IP to MAC relation on upstream network devices. It is most relevant in case of vmotions or VMs/servers moving from one host to another, and the MAC address changes, but the IP remains the same. In the context of ACI, the leaf switches can detect MAC and…

ACI Packet Forwarding

Question

Refer to the exhibit. The VMs called VM1 and VM2 are deployed on the ESXi Server in a Cisco ACI environment. VM1 has MAC address A and an IP address 192.168.1.1/24, and VM2 has MAC address B. VM1 has been shut down. Which set of actions must be taken to detect the movement of IP address 192.168.1.1/24 to MAC address B?

Exhibit

300-620 question #234 exhibit

Options

  • AEnable ARP flooding.
  • BDisable ARP flooding.
  • CDisable ARP flooding.
  • DEnable ARP flooding.

How the community answered

(62 responses)
  • A
    15% (9)
  • B
    6% (4)
  • C
    3% (2)
  • D
    76% (47)

Explanation

GARP is used to update IP to MAC relation on upstream network devices. It is most relevant in case of vmotions or VMs/servers moving from one host to another, and the MAC address changes, but the IP remains the same. In the context of ACI, the leaf switches can detect MAC and IP address movement between leaf switch ports, leaf switches, bridge domains, and EPGs, but it does not detect the movement of an IP address to a new MAC address if the new MAC address is from the same interface and same EPG as the old MAC address. When the GARP based detection option is enabled (configuration available under the BD), Cisco ACI will trigger an endpoint move based on GARP packets if the move occurs on the same interface and same EPG. If a GARP packet comes from the same interface and same EPG, then endpoint learning is triggered only when Unicast Routing, ARP Flooding, and "GARP based detection" are all enabled for the bridge domain.

Topics

#Endpoint movement#IP detection#ARP flooding#Rogue endpoint

Community Discussion

No community discussion yet for this question.

Full 300-620 Practice