300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and ServicesDemo

By Cisco · Question Mode

QuestionQ396

Infrastructure Security

Question Image

Refer to the exhibit. The Math and Science departments connect through the corporate IT router, but Math department users must not be able to reach the Science department, and vice versa.

Which configuration accomplishes this task?

  • A vrf definition Science address-family ipv4 ! interface E 0/2 ip address 192.168.1.1 255.255.255.0 no shut ! interface E 0/3 ip address 192.168.2.1 255.255.255.0 no shut
  • B vrf definition Science address-family ipv4 ! interface E 0/2 vrf forwarding Science ip address 192.168.1.1 255.255.255.0 no shut ! interface E 0/3 vrf forwarding Science ip address 192.168.2.1 255.255.255.0 no shut
  • C vrf definition Science address-family ipv4 ! interface E 0/2 ip address 192.168.1.1 255.255.255.0 vrf forwarding Science no shut ! interface E 0/3 ip address 192.168.2.1 255.255.255.0 vrf forwarding Science no shut
  • D vrf definition Science ! interface E 0/2 ip address 192.168.1.1 255.255.255.0 no shut ! interface E 0/3 ip address 192.168.2.1 255.255.255.0 no shut
Explanation

Separate VRF routing tables isolate the overlapping address spaces and prevent routing between the Math and Science departments. Both Science-facing interfaces, E0/2 and E0/3, must be assigned to the Science VRF. Cisco IOS requires vrf forwarding Science before the interface IP address because assigning an interface to a VRF removes any existing IP address.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!