JN0-683: Data Center, Professional (JNCIP-DC)Demo

By Juniper · Question Mode

QuestionQ22

Data Center Multitenancy and Security

You want to use micro-segmentation within a particular VRF to isolate VXLAN traffic from certain networks.

How would you perform this task?

  • A Use BGP extended communities.
  • B Use route-leaking with RIB tables.
  • C Use firewall filters.
  • D Use a routing-policy to restrict VRF routes.
Explanation

Firewall filters enforce micro-segmentation by matching VXLAN endpoint or traffic attributes and accepting or discarding the applicable traffic. This permits isolation of selected networks within the same VRF. Route leaking, BGP extended communities, and routing policies govern route advertisement or import/export rather than directly enforcing this traffic separation.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!