Which technology , implemented on aggregation -edge nodes at the aggregation layer, provides per -tenant isolation at Layer 3 , with separate dedicated per-tenant routing and forwarding tables on…

Question

Options

• AVDC
• BVLAN
• CVXLAN
• DVRF-lite

• A
  4% (1)
• B
  7% (2)
• C
  14% (4)
• D
  75% (21)

Explanation

VRF-lite (Virtual Routing and Forwarding - lite) is correct because it operates at Layer 3 and creates completely separate, dedicated routing and forwarding tables per tenant - exactly what the question describes. When deployed on aggregation-edge nodes, each tenant gets its own isolated routing domain, meaning traffic from one tenant cannot leak into another's routing table, even on shared physical hardware with firewall contexts.

Why the distractors are wrong:

• A. VDC (Virtual Device Context) virtualizes the device itself into logical switches/routers (Nexus-specific), not per-tenant routing tables - it's about device partitioning, not per-tenant forwarding isolation.
• B. VLAN operates at Layer 2, providing broadcast domain segmentation, not separate L3 routing/forwarding tables.
• C. VXLAN is an overlay encapsulation protocol (tunnels L2 over L3 UDP), used for extending networks across data centers - not for maintaining per-tenant routing tables on aggregation nodes.

Memory tip: Think "VRF = Virtual Routing for every tenant's File (table)." The word routing and forwarding tables in the question is a direct giveaway - only VRF-lite explicitly creates separate RIB/FIB per tenant. If the question mentions dedicated per-tenant routing tables, the answer is always VRF or VRF-lite.

No community discussion yet for this question.