Your customer is interested in hearing more about how roles can help keep consistent policy enforcement in a distributed overlay fabric. How would you explain this concept to them?

Question

Options

• AGroup Based Policy ID is applied on egress VTEP after device authentication and policy is
• BRole-based policies are tied to IP addresses which have an advantage over IP-based policies and
• CGroup Based Policy ID is applied on ingress VTEP after device authentication and policy is
• DRole-based policies enhance User Based Tunneling across the campus network and the policy

• A
  6% (2)
• B
  3% (1)
• C
  81% (29)
• D
  11% (4)

Explanation

This is the correct explanation of how roles can help keep consistent policy enforcement in a distributed overlay fabric. Roles are used to assign group based policy IDs (GBPs) to devices after they authenticate with ClearPass or a local database. GBPs are then used to tag the traffic from the devices and send them to the ingress VTEP, which applies the GBP on the VXLAN header. The egress VTEP then enforces the policy based on the GBP and the destination device. The other options are incorrect because they either do not describe the correct sequence of events or do not use the correct terms.

No community discussion yet for this question.