nerdexam
Cisco

350-501 · Question #123

ASN 65001 is peering with ASN 65002 to exchange IPv6 BGP routes. All routes that originate in ASN 65001 have a standard community value of 65001:100, and ASN 65002 is allowed to advertise only 2001…

The correct answer is D. Option D. To meet the filtering conditions, the ASN 65001 border router needs to deny inbound routes containing AS 65001 or having 10 or more ASNs in the path, and then apply community 65001:200 to all accepted routes.

Networking

Question

ASN 65001 is peering with ASN 65002 to exchange IPv6 BGP routes. All routes that originate in ASN 65001 have a standard community value of 65001:100, and ASN 65002 is allowed to advertise only 2001 :db8:aaaa::/48. An engineer needs to update the ASN 65001 route-filtering configuration to meet these conditions:

  • Looped routes into ASN 65001 and routes that have traversed 10 or

more ASNs must be denied.

  • Routes accepted into ASN 65001 must be assigned a community value of

65001:200. Which configuration must the engineer apply to the ASN 65001 border router?

Exhibits

350-501 question #123 exhibit 1
350-501 question #123 exhibit 2
350-501 question #123 exhibit 3

Options

  • AOption A
  • BOption B
  • COption C
  • DOption D
  • EOption E

How the community answered

(48 responses)
  • A
    6% (3)
  • B
    2% (1)
  • C
    2% (1)
  • D
    79% (38)
  • E
    10% (5)

Why each option

To meet the filtering conditions, the ASN 65001 border router needs to deny inbound routes containing AS 65001 or having 10 or more ASNs in the path, and then apply community 65001:200 to all accepted routes.

AOption A

Without the full configurations, it's impossible to definitively state why A is wrong, but it likely fails to implement all required AS-path filtering or community setting correctly, such as denying looped routes or routes with 10+ ASNs, or setting the correct community.

BOption B

This option likely misses a specific filtering criteria, such as denying routes with 10 or more ASNs, or might incorrectly apply the community attribute, making it incomplete or incorrect.

COption C

This option probably misconfigures the AS-path access-lists or the route-map logic, leading to incorrect filtering decisions or failing to assign the mandatory community value to accepted routes.

DOption DCorrect

This option configures an AS-path access-list to deny routes containing ASN 65001 (to prevent loops) and uses a route-map with `match as-path length ge 10` to deny routes with excessively long AS paths. A subsequent permit statement in the route-map then sets the required community `65001:200 additive` on all other accepted routes, fulfilling all specified requirements for inbound filtering.

EOption E

This option likely contains errors in the AS-path regular expressions, the sequence of route-map statements, or an incorrect community attribute, preventing it from meeting all the stated requirements for filtering and attribute modification.

Concept tested: BGP Route Filtering and Community Setting

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/xe-16/irg-xe-16-book/bgp-route-filtering.html | https://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/fs_bcom.html

Topics

#BGP Routing Policy#AS-Path Filtering#BGP Communities#IPv6 BGP

Community Discussion

No community discussion yet for this question.

Full 350-501 Practice