nerdexam
Cisco

352-001 · Question #196

You have been tasked to create a Layer 2 network design that uses vPC to provide resiliency and avoid loops. vPC removes Layer 2 loops while providing redundancy through which mechanism?

The correct answer is C. strict forwarding rules. vPC eliminates Layer 2 loops by enforcing strict forwarding rules that prohibit frames received on the peer link from being forwarded out vPC member ports.

Layer 2 Control Plane

Question

You have been tasked to create a Layer 2 network design that uses vPC to provide resiliency and avoid loops. vPC removes Layer 2 loops while providing redundancy through which mechanism?

Options

  • Adual-active detection
  • Baddress synchronization
  • Cstrict forwarding rules
  • DBridge Assurance

How the community answered

(51 responses)
  • A
    16% (8)
  • B
    4% (2)
  • C
    73% (37)
  • D
    8% (4)

Why each option

vPC eliminates Layer 2 loops by enforcing strict forwarding rules that prohibit frames received on the peer link from being forwarded out vPC member ports.

Adual-active detection

Dual-active detection is a keepalive mechanism used to identify a split-brain condition when the peer link fails while both switches remain active, and does not itself prevent forwarding loops.

Baddress synchronization

Address synchronization keeps MAC address and ARP tables consistent between vPC peers to optimize forwarding decisions, but it is not the mechanism that prevents loop formation.

Cstrict forwarding rulesCorrect

vPC's strict forwarding rules specify that any frame arriving on the vPC peer link must not be forwarded out a vPC member port, which breaks the potential loop path that would otherwise exist between the two vPC peer switches and their downstream device. This rule allows the peer link to remain active for orphan-port traffic and control-plane communication while preventing the loop that Spanning Tree would normally block, enabling loop-free Layer 2 redundancy without relying on STP to block active links.

DBridge Assurance

Bridge Assurance is a Spanning Tree Protocol feature that detects unidirectional link failures on point-to-point links and is not part of the vPC loop-prevention design.

Concept tested: vPC peer-link strict forwarding rules for loop prevention

Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/92x/interfaces/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Interfaces_Configuration_Guide_Release_92x/b_Cisco_Nexus_9000_Series_NX-OS_Interfaces_Configuration_Guide_Release_92x_chapter_0101.html

Topics

#vPC#Layer 2 loop prevention#strict forwarding rules#data center resiliency

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice