JN0-664: Service Provider Routing and Switching, ProfessionalDemo

By Juniper · Question Mode

QuestionQ12

Layer 3 VPNs

Click the Exhibit button.

Question Image

With reference to the exhibit, CE-1 provides NAT services for the hosts at Site 1, and Internet access must be provided for those hosts.

Which two statements are correct for this scenario?

Choose two
  • A You must configure a static route in the main routing instance for the 203.0.113.1/32 prefix that uses the VPN-A.inet.0 table as the next hop.
  • B You must configure a static route in the main routing instance for the 10.1.2.0/24 prefix that uses the VPN-A.inet.0 table as the next hop.
  • C You must configure a RIB group on PE-1 to leak a default route from the inet.0 table to the VPN-A.inet.0 table.
  • D You must configure a RIB group on PE-1 to leak the 10.1.2.0/24 prefix from the VPN-A.inet.0 table to the inet.0 table.
Explanation

Because Site 1 traffic is source-NATed to public address 203.0.113.1, return traffic from the Internet must have a route in inet.0 for 203.0.113.1/32 that forwards lookup to VPN-A.inet.0. The VPN routing table also needs an Internet default route, which is provided by leaking the default route from inet.0 into VPN-A.inet.0. The 10.1.2.0/24 private subnet is not the address used for Internet return traffic after NAT.

Community Discussion

No comments yet. Be the first to start the discussion!