352-001 · Question #265
A Tier-3 Service Provider is evolving into a Tier-2 Service Provider due to the amount of Enterprise business it is receiving. The network engineers are re-evaluating their IP/MPLS design consideratio
The correct answer is B. Assigning unique Route Distinguishers. Route Distinguishers (RDs) are the MPLS VPN mechanism that makes overlapping customer IP prefixes globally unique within the provider's MP-BGP VPNv4 table, which is essential when supporting multiple customers with duplicate address space.
Question
A Tier-3 Service Provider is evolving into a Tier-2 Service Provider due to the amount of Enterprise business it is receiving. The network engineers are re-evaluating their IP/MPLS design considerations in order to support duplicate/overlapping IP addressing from their Enterprise customers within each Layer 3 VPN. Which of the following would need to be reviewed to ensure stability in their network?
Options
- AAssigning unique Route Target ID's
- BAssigning unique Route Distinguishers
- CAssigning unique IP address space for the Enterprise NAT/Firewalls
- DAssigning unique VRF ID's to each Layer 3 VPN
How the community answered
(41 responses)- A7% (3)
- B76% (31)
- C2% (1)
- D15% (6)
Why each option
Route Distinguishers (RDs) are the MPLS VPN mechanism that makes overlapping customer IP prefixes globally unique within the provider's MP-BGP VPNv4 table, which is essential when supporting multiple customers with duplicate address space.
Route Targets control VRF import and export policies - they determine which VPNs can exchange routes - but they do not make overlapping IP prefixes unique within the provider's BGP table.
In an MPLS Layer 3 VPN, each customer VRF is assigned a unique RD that is prepended to customer IP prefixes before they are advertised into the provider's MP-BGP VPNv4 address family. This 8-byte value creates a globally unique VPNv4 route even when two different customers advertise identical IP prefixes, preventing route collisions in the control plane. Without unique RDs per customer VRF, the provider's BGP table cannot distinguish overlapping customer addresses, leading to routing instability.
Assigning unique IP address space via NAT or firewalls would eliminate overlapping addresses at the edge, but the scenario requires the network to natively carry overlapping addresses within separate VPNs rather than avoiding them.
VRF IDs are locally significant labels on a PE router used to identify the forwarding table for a packet; they are not propagated in the BGP control plane and do not resolve overlapping prefix collisions in the provider's VPNv4 table.
Concept tested: MPLS VPN Route Distinguishers for overlapping customer addresses
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_l3_vpns/configuration/xe-16/mp-l3-vpns-xe-16-book/mp-bgp-vpns.html
Topics
Community Discussion
No community discussion yet for this question.