You are adding a server lo a tenant's network within your data center and must limit access to a specific traffic type within the tenant network without pushing all tenant traffic through a…

Question

Options

• AUse route leaking with EVPN and a routing policy.
• BUse filter-based forwarding.
• CPut the new server on a unique subnet within the tenant's network.
• DUse a static route in the tenant VRF with a firewall as the next hop for traffic to the new server.

• A
  17% (4)
• B
  75% (18)
• C
  4% (1)
• D
  4% (1)

Explanation

Use filter-based forwarding: Filter-based forwarding (FBF) allows you to create policies that apply only to specific types of traffic and forward that traffic to a designated path, such as a firewall, without affecting all traffic in the tenant network. This solution enables you to limit access to specific traffic types and send that traffic through a firewall, without pushing all tenant traffic through the firewall. FBF works based on filters, which match specific traffic patterns (e.g., IP, protocol, port), and forwards the matching traffic to a particular next hop.

No community discussion yet for this question.