350-501 · Question #61
An engineer is setting up overlapping VPNs to allow VRF ABC and XYZ to communicate with VRF CENTRAL but wants to make sure that VRF ABC and XYZ cannot communicate. Which configuration accomplishes the
The correct answer is A. vrf ABC address-family ipv4 unicast import route-target 65000:1111 65000:4444 ! export route-target 65000:1111 65000:3333 ! ! vrf XYZ address-family ipv4 unicast import route-target 65000:2222 65000:4444 ! export route-target 65000:2222 65000:3333 ! ! vrf CENTRAL address-family ipv4 unicast import route-target 65000:3333 ! export route-target 65000:4444 ! !. Concept in Route target is very simple "export in VRF1 equal import in VRF2" and visa versa - IMPORT-RT in ABC must not equal EXPORT RT in XYZ and visa versa - IMPORT RT in (ABC,XYZ) must equal EXPORT RT in CENTRAL and visa versa IMPORT-RT in Central equal EXPORT-RT in (ABC,XYZ)
Question
An engineer is setting up overlapping VPNs to allow VRF ABC and XYZ to communicate with VRF CENTRAL but wants to make sure that VRF ABC and XYZ cannot communicate. Which configuration accomplishes these objectives? A. B. C. D.
Exhibits
Options
- Avrf ABC address-family ipv4 unicast import route-target 65000:1111 65000:4444 ! export route-target 65000:1111 65000:3333 ! ! vrf XYZ address-family ipv4 unicast import route-target 65000:2222 65000:4444 ! export route-target 65000:2222 65000:3333 ! ! vrf CENTRAL address-family ipv4 unicast import route-target 65000:3333 ! export route-target 65000:4444 ! !
- Bvrf ABC address-family ipv4 unicast import route-target 65000:1111 ! export route-target 65000:1111 ! ! vrf XYZ address-family ipv4 unicast import route-target 65000:2222 ! export route-target 65000:2222 ! ! vrf CENTRAL address-family ipv4 unicast import route-target 65000:3333 65000:1111 65000:2222 ! export route-target 65000:3333 65000:1111 65000:2222 ! !
- Cvrf ABC address-family ipv4 unicast import route-target 65000:1111 65000:4444 ! export route-target 65000:1111 65000:3333 ! ! vrf XYZ address-family ipv4 unicast import route-target 65000:2222 65000:4444 ! export route-target 65000:2222 65000:3333 ! ! vrf CENTRAL address-family ipv4 unicast import route-target 65000:3333 ! export route-target 65000:4444 ! !
- Dvrf ABC address-family ipv4 unicast import route-target 65000:1111 65000:3333 ! export route-target 65000:1111 65000:3333 ! ! vrf XYZ address-family ipv4 unicast import route-target 65000:2222 65000:3333 ! export route-target 65000:2222 65000:3333 ! ! vrf CENTRAL address-family ipv4 unicast import route-target 65000:3333 ! export route-target 65000:3333 ! !
How the community answered
(34 responses)- A76% (26)
- B3% (1)
- C12% (4)
- D9% (3)
Explanation
Concept in Route target is very simple "export in VRF1 equal import in VRF2" and visa versa - IMPORT-RT in ABC must not equal EXPORT RT in XYZ and visa versa - IMPORT RT in (ABC,XYZ) must equal EXPORT RT in CENTRAL and visa versa IMPORT-RT in Central equal EXPORT-RT in (ABC,XYZ)
Topics
Community Discussion
No community discussion yet for this question.