350-501 · Question #328
Refer to the exhibit. An ISP engineer configured a VRF to isolate traffic for the customer ciscotest as shown. Now, the engineer must implement the Intra-AS VPN feature on PE1 to pass traffic between
The correct answer is B. router bgp 64525. To implement Intra-AS VPN features for traffic exchange between customer sites, PE1 must apply policy-based Route Targets. Export map and import map provide granular control over the application and filtering of these Route Targets.
Question
Refer to the exhibit. An ISP engineer configured a VRF to isolate traffic for the customer ciscotest as shown. Now, the engineer must implement the Intra-AS VPN feature on PE1 to pass traffic between customer sites. Which additional configuration must the engineer apply to PE1 to meet this requirement?
Exhibit
Options
- Arouter bgp 64525
- Brouter bgp 64525
- Crouter bgp 64525
- Drouter bgp 64525
How the community answered
(15 responses)- A7% (1)
- B80% (12)
- C13% (2)
Why each option
To implement Intra-AS VPN features for traffic exchange between customer sites, PE1 must apply policy-based Route Targets. `Export map` and `import map` provide granular control over the application and filtering of these Route Targets.
This option is missing the essential Route Target configuration, which is critical for VPNv4 routes to be imported and exported between VRFs and thus for traffic to pass between customer sites.
The `export map` and `import map` commands within the `address-family ipv4 vrf ciscotest` context are used to apply and filter Route Targets (RTs) dynamically based on route-map logic. This advanced method directly controls how VPNv4 routes from one customer site are exported and how routes from other sites are imported into the VRF, enabling traffic exchange between customer VPN sites according to specific policies, complemented by MP-BGP for VPNv4 route exchange.
Although this option correctly configures `route-target export/import`, `rd auto`, and redistribution, it omits the `neighbor 10.1.1.2 route-reflector-client` command in the `vpnv4` address family, which is a standard component for scalable Intra-AS VPN deployments assuming 10.1.1.2 is an RR.
This option is missing the critical `redistribute connected` and `redistribute static` commands within the VRF's address family. Without redistribution, customer routes (connected or static) will not be injected into BGP and subsequently into the VPNv4 routing table for exchange.
Concept tested: MPLS VPN Intra-AS VPN Route Target Maps
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_l3_vpns/configuration/xe-3s/mp-l3-vpns-xe-3s-book/mp-l3-vpns-policy.html
Topics
Community Discussion
No community discussion yet for this question.
