nerdexam
Cisco

352-001 · Question #354

In a routed access hierarchical campus design, the access-to-distribution Layer 2 uplink trunks are replaced with Layer 3 point-to-point routed links. Why is it recommended that VLANs are confined on

The correct answer is D. to prevent routing black holes. In a routed access design, VLANs must not span multiple access switches because the routing table would have no valid next-hop for a subnet when the inter-switch path is lost, creating a routing black hole.

Designing Network Infrastructure

Question

In a routed access hierarchical campus design, the access-to-distribution Layer 2 uplink trunks are replaced with Layer 3 point-to-point routed links. Why is it recommended that VLANs are confined on a single access switch rather than span across multiple access switches?

Options

  • Ato allow for better convergence time
  • Bto prevent the occurrence of Layer 2 loops
  • Cto allow for fault isolation
  • Dto prevent routing black holes

How the community answered

(47 responses)
  • A
    6% (3)
  • B
    15% (7)
  • C
    28% (13)
  • D
    51% (24)

Why each option

In a routed access design, VLANs must not span multiple access switches because the routing table would have no valid next-hop for a subnet when the inter-switch path is lost, creating a routing black hole.

Ato allow for better convergence time

Convergence time is improved by replacing L2 trunks with L3 links because routing protocols converge faster than STP, but this is a property of routed access in general and is not specifically dependent on whether VLANs span multiple access switches.

Bto prevent the occurrence of Layer 2 loops

Layer 2 loops are prevented by the routed access design itself because L3 point-to-point links break the L2 domain; VLAN scoping to a single switch does not add further loop prevention.

Cto allow for fault isolation

Fault isolation is a benefit of routed access design broadly, but the specific failure scenario that VLAN confinement addresses is the routing black hole, not general fault isolation.

Dto prevent routing black holesCorrect

In a routed access model, each access switch has a directly connected subnet per VLAN. If a VLAN spans two access switches and the uplink from one switch fails, the distribution layer router still has a route pointing toward that subnet via both switches, but traffic sent toward the switch with the severed path is silently dropped - a routing black hole. Confining each VLAN to a single access switch ensures the subnet is reachable through exactly one upstream routed link, eliminating this ambiguity.

Concept tested: Routed access VLAN scoping to prevent routing black holes

Source: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Campus/roaac.html

Topics

#routed access#VLAN design#routing black holes#campus design

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice