nerdexam
Cisco

352-011 · Question #31

In a routed access hierarchical campus design, the access-to-distribution Layer 2 uplink trunks are replaced with Layer 3 point-to-point routed links. Why is it recommended that VLANs are confined…

The correct answer is D. to prevent routing black holes. In a routed access design, each access switch has a Layer 3 uplink, meaning the distribution layer maintains routing entries with a specific next-hop for each subnet. If a VLAN (and its subnet) spans two access switches, the distribution router can only point that route toward…

Enterprise Network Design

Question

In a routed access hierarchical campus design, the access-to-distribution Layer 2 uplink trunks are replaced with Layer 3 point-to-point routed links. Why is it recommended that VLANs are confined on a single access switch rather than span across multiple access switches?

Options

  • Ato allow for better convergence time
  • Bto prevent the occurrence of Layer 2 loops
  • Cto allow for fault isolation
  • Dto prevent routing black holes

How the community answered

(42 responses)
  • A
    5% (2)
  • B
    24% (10)
  • C
    10% (4)
  • D
    62% (26)

Explanation

In a routed access design, each access switch has a Layer 3 uplink, meaning the distribution layer maintains routing entries with a specific next-hop for each subnet. If a VLAN (and its subnet) spans two access switches, the distribution router can only point that route toward one of them - so traffic destined for hosts sitting on the other access switch gets forwarded to the wrong switch and silently dropped, creating a routing black hole. Confining each VLAN to a single access switch ensures the distribution layer always has an unambiguous, correct next-hop for every subnet.

Why the distractors are wrong:

  • A (convergence time): Faster convergence comes from using routing protocols and eliminating STP, not from VLAN placement. This is a benefit of the routed access architecture, not of confining VLANs.
  • B (Layer 2 loops): L2 loops are already eliminated by replacing trunk uplinks with routed point-to-point links - STP is no longer needed between access and distribution. VLAN confinement doesn't add to this protection.
  • C (fault isolation): While a side benefit, fault isolation is not the reason VLANs must be confined. You'd confine VLANs even if fault isolation weren't a concern.

Memory tip: Picture a delivery address: if the router's "address book" lists one access switch as the delivery point for a subnet, any hosts in that subnet living elsewhere are unreachable - the packet falls into a black hole. One subnet = one exit point.

Topics

#routed access design#VLAN localization#Layer 3 uplinks#routing black holes

Community Discussion

No community discussion yet for this question.

Full 352-011 Practice