You work for a service provider and must design a simple solution to provide Internet connectivity to an MPLS Layer 3 VPN customer whose IPv4 address block is 172.32.100.0/24. Which two options…

A route to 172.32.100.0/24 in the global RIB makes the customer subnet reachable from the Internet-facing side of the PE, allowing return traffic from the Internet to be forwarded back into the VRF. Without this route in the global table, the PE has no way to deliver inbound Internet traffic back to the correct VRF.

NAT is not required when route leaking between VRF and global RIB is implemented; the customer retains its original addressing and bidirectional reachability is handled by the leaked routes.

A default route in the VRF with a next hop pointing into the global RIB allows customer traffic originating in the VRF to exit toward the Internet via the PE's global routing table. This route leaking between the VRF and the global RIB is the standard Cisco mechanism for providing Internet access from an L3 VPN without NAT.

Policy-based routing adds unnecessary complexity and does not resolve the fundamental routing separation between the VRF and the global RIB that prevents Internet access.

Destination NAT is used for inbound connections to servers behind a translated address, not for providing general outbound Internet connectivity from a VRF to the global table.