300-610 DCID: Designing Cisco Data Center InfrastructureDemo

By Cisco · Question Mode

QuestionQ264

Network Design

Refer to the exhibit.

Question Image

A customer needs a VXLAN fabric deployment that meets these requirements:

  • DNS must function as a shared service.
  • Users must not need to share resources directly with other users.
  • The deployment must use the least configuration-intensive method to achieve route leaking.

Which action must the customer take to satisfy these criteria?

  • A Encapsulate traffic on VTEP2 with VNI 3002.
  • B Encapsulate traffic on VTEP2 with VNI 5000.
  • C Encapsulate traffic on VTEP1 with VNI 3002.
  • D Encapsulate traffic on VTEP1 with VNI 5000.
Explanation

A shared-services VRF allows multiple isolated tenant VRFs to reach DNS without permitting direct tenant-to-tenant resource sharing. With VXLAN EVPN downstream VNI forwarding, traffic destined for the shared DNS VRF is encapsulated at VTEP1 using the shared service's downstream VNI, 5000, so it reaches VTEP2 in the DNS VRF. This avoids configuring separate full route-leaking relationships between every user VRF and the DNS VRF. Cisco documents that shared-services VRFs import multiple tenant L3VRFs into a shared service and support different downstream L3VNIs on a per-peer basis.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!