350-501 SPCOR: Implementing and Operating Cisco Service Provider Network Core TechnologiesDemo

MPLS LDP session protection uses targeted Hellos to maintain the LDP session when a primary link adjacency fails and an alternate IP path remains available. This preserves existing LDP bindings so they do not have to be relearned after the routing path changes.

An MPLS Layer 2 VPN pseudowire extends a VLAN service between the endpoint routers while the intervening routers forward MPLS-encapsulated traffic and do not install the customer VLAN routes. The attachment interface requires an xconnect command specifying the remote peer and virtual-circuit ID, with an MPLS pseudowire class applied to it.

Within a policy-map class, set dscp ef marks matching packets with the Expedited Forwarding DSCP value. Cisco documents set dscp as the command for setting the DSCP value in policy-map class configuration mode; priority, WRED, and fair queueing are not marking commands.

Nonstop Forwarding preserves the forwarding plane through a control-plane or route-processor failure, enabling continued packet forwarding while routing information is recovered. In an MPLS environment, retained MPLS forwarding state allows labeled traffic to be forwarded while the RIB updates after failover.

TI-LFA computes a backup repair path using P-, Q-, or PQ nodes on the post-convergence topology. Its repair path is designed to match the path that data traffic follows after IGP convergence after a failure, using segment routing to steer traffic without loops.

Strict priority queuing places the classified critical flow in a priority queue that is serviced before all other queues. During congestion, this gives the time-sensitive server traffic preferential access to link bandwidth, while lower-priority traffic can be starved or dropped. Cisco QoS Configuration Guide

Egress PE NAT stores a VRF identifier with each translation, allowing it to distinguish identical inside addresses originating in different L3VPNs and route return traffic to the correct VRF. Consequently, overlapping internal addressing and shared outside global addresses can be supported.

BFD detects forwarding-path failure using the negotiated packet interval multiplied by the detection multiplier. A 200-ms minimum receive interval with a multiplier of 3 gives a 600-ms failure-detection time. The bfd interval 150 min_rx 200 multiplier 3 interface command is the standard baseline BFD configuration and enables BFD echo mode by default on the applicable Cisco IOS XE platforms.

Cisco BGP conditional advertisement uses neighbor <peer> advertise-map <map> non-exist-map <map>. Advertise-route matches ACL 14 and therefore selects 172.43.232.0/23 for advertisement. Non-RIB matches ACL 13 and therefore tracks 10.10.1.1; when that route is absent from the BGP table, R1 advertises the selected subnet to ISP_B at 10.182.213.3.

Traditional Cisco NetFlow must be enabled on the interface to collect traffic flows, and exported-flow monitoring requires an ip flow-export destination to send those records to a NetFlow collector. Configuring ingress NetFlow on TenGigE 0/0/0/1 together with a Version 9 export destination provides both collection and export of the affected traffic.

OpenStack components are deployed on compute servers. Cisco UCS Series provides the server compute infrastructure, while the core, aggregation, and access portions are network layers that provide connectivity.

Cisco NSO is an automation and orchestration platform that bridges automation and orchestration frameworks to the underlying physical and virtual network infrastructure. It provides interfaces and abstractions for managing network services and devices across vendors and domains.

IPFIX is selected with export-protocol ipfix, and CS3 is DSCP value 24. source Loopback0, ttl 64, and the specified destination configure the remaining explicit requirements. Flexible NetFlow IPFIX uses UDP destination port 4739 by default, so omitting the transport udp 4739 command still yields the required transport and port.

Authenticating the client establishes who is making each API request and prevents unauthenticated or improperly authenticated access. Correctly implemented authentication is a fundamental defense against broken-authentication vulnerabilities, which can otherwise allow attackers to assume another user's identity or account.

VRF-100 must import RT 65010:2999 to receive the shared VoIP prefixes exported by the shared-services VRF. Its permitted customer prefix, 198.18.1.0/29, must be exported with both its normal RT 65010:100 and RT 65010:1999, because the shared-services VRF imports RT 65010:1999. Other exported VRF-100 routes retain only RT 65010:100.

An IPv6 MPLS L3VPN VRF must enable the IPv6 unicast address family. The VPN also needs a route target that is both exported with local routes and imported from the remote PE; using the same 1441:3421 route target on all Customer A sites provides any-to-any connectivity and lets later sites join without changing existing sites. Cisco IOS XE supports address-family ipv6 in a VRF and route-target {import | export | both} within that address family.

IP precedence 5 is binary 101. set mpls experimental imposition 4 marks the MPLS EXP field on labels imposed at R1, while the customer IP precedence is preserved for MPLS disposition. R3 must therefore classify the egress IP traffic with precedence 101, and its policy map must reserve 10% of the interface bandwidth for that class. Cisco documents that MPLS EXP imposition sets the EXP value on imposed labels and that MPLS disposition can classify traffic by IP ToS/precedence at egress.

Local Preference determines the preferred BGP exit path within an autonomous system, and BGP selects the route with the highest Local Preference. Setting a higher Local Preference on routes received inbound from selected BGP speakers makes those speakers the preferred points for the customer AS.

An untrusted QoS boundary does not accept incoming traffic markings as valid. It remarks the traffic to the default Class of Service value, CoS 0, preventing an external sender from obtaining preferential treatment through its own markings.

A Cisco ACI bgpPeerP object configures a BGP peer using its addr attribute, and its nested bgpAsP object specifies the peer autonomous-system number. The configuration therefore establishes BGP neighbor 192.168.1.2 with remote AS 65514.

With asymmetric IRB, the ingress VTEP performs both bridging and routing for intersubnet traffic, while the egress VTEP performs only bridging. Cisco EVPN VXLAN Integrated Routing and Bridging documentation

RSVP-TE tunnel setup is initiated by the headend with a PATH message sent toward the tailend. The tailend subsequently returns a RESV message upstream to confirm and install reservation state.

PIM dense mode uses a flood-and-prune model: multicast traffic is initially flooded across the PIM dense-mode network, and routers without interested downstream receivers send prune messages to stop traffic on those branches. This provides broad initial delivery while permitting unwanted flow paths to be pruned.

Source-specific multicast membership requires IGMPv3, which can signal a join for a particular source and multicast group. An extended IGMP access list evaluates the wildcard group pair (0.0.0.0, 239.10.10.10) before individual source-group pairs; permitting that group and then permitting (172.20.20.3, 239.10.10.10) allows only the assigned feed, while the final deny blocks all other joins.