352-001 · Question #613
Which two statements about VXLAN are true? (Choose two)
The correct answer is B. VXLAN is an encapsulation method used to create a Layer 3 overlay network E. VXLAN overcomes the 802.1Q virtual LAN address space limitation. VXLAN is an open standards-based encapsulation protocol that tunnels Layer 2 Ethernet frames over a Layer 3 UDP/IP underlay, and its 24-bit VNI field vastly expands on the 4,096-segment limit of 802.1Q. These two properties are the core design characteristics defined in RFC 7348.
Question
Which two statements about VXLAN are true? (Choose two)
Options
- AVXLAN is a Cisco proprietary solution
- BVXLAN is an encapsulation method used to create a Layer 3 overlay network
- CVXLAN can be used to enforce Layer 2 isolation in a multitenant infrastructure
- DVXLAN uses the Spanning Tree protocol for loop prevention
- EVXLAN overcomes the 802.1Q virtual LAN address space limitation
How the community answered
(34 responses)- A3% (1)
- B94% (32)
- D3% (1)
Why each option
VXLAN is an open standards-based encapsulation protocol that tunnels Layer 2 Ethernet frames over a Layer 3 UDP/IP underlay, and its 24-bit VNI field vastly expands on the 4,096-segment limit of 802.1Q. These two properties are the core design characteristics defined in RFC 7348.
VXLAN is an open industry standard defined in IETF RFC 7348 and is implemented by multiple vendors including VMware, Arista, and Juniper - it is not a Cisco proprietary protocol.
VXLAN (RFC 7348) is an encapsulation method that wraps Layer 2 Ethernet frames inside UDP/IP packets, enabling them to be transported across a Layer 3 routed underlay network as an overlay. This allows Layer 2 segments to be extended across geographically separated data centers or network pods that are connected only by IP routing.
VXLAN provides logical network segmentation through VNIs but does not by itself enforce security isolation - true multi-tenant isolation requires additional policy enforcement mechanisms such as microsegmentation or firewall policies beyond VXLAN encapsulation alone.
VXLAN does not use Spanning Tree Protocol for loop prevention - loop avoidance is handled by the IP underlay routing and VTEP (VXLAN Tunnel Endpoint) logic, which eliminates the need for STP within the overlay.
The IEEE 802.1Q standard supports only 4,096 VLAN IDs due to its 12-bit VLAN tag field, which is insufficient for large-scale multi-tenant cloud environments. VXLAN uses a 24-bit VXLAN Network Identifier (VNI) supporting approximately 16 million unique network segments, directly overcoming this address space limitation.
Concept tested: VXLAN encapsulation, VNI scalability, and 802.1Q limitation
Source: https://datatracker.ietf.org/doc/html/rfc7348
Topics
Community Discussion
No community discussion yet for this question.