nerdexam
Cisco

352-001 · Question #26

Two MPLS service providers (SP1 and SP2) are offering inter-provider RFC 2547/4364-based IP- VPN service to an enterprise customer. IP traffic among some of the customer's sites has to traverse both o

The correct answer is B. enable Path MTU Discovery on all devices within the enterprise. In an inter-provider MPLS VPN, enabling Path MTU Discovery on enterprise devices allows senders to dynamically adapt their packet sizes to the actual end-to-end path MTU, preventing drops.

Network Virtualization

Question

Two MPLS service providers (SP1 and SP2) are offering inter-provider RFC 2547/4364-based IP- VPN service to an enterprise customer. IP traffic among some of the customer's sites has to traverse both of the service providers. The service providers and the enterprise do not know what the minimum MTU is along the end-to-end path. What could be done to guarantee that large packets are not dropped for MTU-related reasons?

Options

  • Aenable Path MTU Discovery on all devices within SP1 and SP2
  • Benable Path MTU Discovery on all devices within the enterprise
  • Cconfigure the IP sender or senders to set the DF flag in the IP header
  • Dconfigure the IP sender or senders to clear the DF flag in the IP header

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    58% (15)
  • C
    8% (2)
  • D
    27% (7)

Why each option

In an inter-provider MPLS VPN, enabling Path MTU Discovery on enterprise devices allows senders to dynamically adapt their packet sizes to the actual end-to-end path MTU, preventing drops.

Aenable Path MTU Discovery on all devices within SP1 and SP2

Enabling PMTUD only on SP devices does not help because the enterprise senders still do not know to reduce their packet sizes before the traffic enters the MPLS network.

Benable Path MTU Discovery on all devices within the enterpriseCorrect

Enabling PMTUD on enterprise devices ensures that the senders set the DF bit and are equipped to process ICMP Fragmentation Needed responses, allowing them to reduce segment sizes when the MPLS label stack overhead causes packets to exceed an intermediate link's MTU. Because the enterprise senders are the origin of traffic, only they can reduce packet sizes at the source - making PMTUD on the enterprise the effective end-to-end solution.

Cconfigure the IP sender or senders to set the DF flag in the IP header

Setting the DF flag alone without enabling the full PMTUD stack means senders will not process ICMP Fragmentation Needed replies or adjust their packet sizes, so large packets will still be dropped.

Dconfigure the IP sender or senders to clear the DF flag in the IP header

Clearing the DF flag permits fragmentation at intermediate hops rather than preventing oversized packets, and fragmentation in MPLS environments creates reassembly overhead and does not reliably solve MTU mismatches.

Concept tested: Path MTU Discovery in inter-provider MPLS VPN environments

Source: https://www.cisco.com/c/en/us/support/docs/multiprotocol-label-switching-mpls/mpls/12029-mpls-vrf-mtu-issues.html

Topics

#MPLS IP-VPN#Path MTU Discovery#inter-provider VPN#MTU fragmentation

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice