Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Juniper JN0-683 Exam - Topic 4 Question 7 Discussion

Posted by Billye on Sep 15, 2024 at 02:56 AM

You are adding a server lo a tenant's network within your data center and must limit access to a specific traffic type within the tenant network without pushing all tenant traffic through a firewall.

What will satisfy this requirement?

Suggested Answer: B, C, E

Understanding ERB Architecture:

ERB (Edge Routed Bridging) architecture is a network design where the routing occurs at the edge (leaf devices) rather than in the spine devices. In a VXLAN overlay network with EVPN as the control plane, leaf devices typically act as both Layer 2 (L2) and Layer 3 (L3) VXLAN gateways.

Placement of VXLAN Gateways:

Option B: All leaf devices will have L2 VXLAN gateways to handle the bridging of VLAN traffic into VXLAN tunnels.

Option C: All leaf devices will also have L3 VXLAN gateways to route traffic between different VXLAN segments (VNIs) and external networks.

Option E: Spine devices in an ERB architecture generally do not function as VXLAN gateways. They primarily focus on forwarding traffic between leaf nodes and do not handle VXLAN encapsulation/decapsulation.

Conclusion:

Option B: Correct---All leaf devices will have L2 VXLAN gateways.

Option C: Correct---All leaf devices will have L3 VXLAN gateways.

Option E: Correct---Spine devices will not act as VXLAN gateways


Get Premium JN0-683 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
35 comments · newest first
KE
Keva 11 months ago
Wait, can you really do that without a firewall?
LE
Leatha 11 months ago
D just adds unnecessary complexity, right?
MA
Marvel 11 months ago
C sounds too simple, not sure it would work.
GR
Graciela 11 months ago
I think B is better for filtering traffic.
TH
Thurman 12 months ago
A is the way to go with EVPN!
LA
Laticia 12 months ago
I feel like using a static route with a firewall as the next hop could be overkill for this scenario, but it might be worth considering.
LO
Louis 1 year ago
Putting the server on a unique subnet seems like a straightforward approach, but I'm not convinced it fully limits access as required.
LU
Ludivina 1 year ago
I remember practicing with filter-based forwarding, so option B might be the right choice, but I need to double-check the specifics.
CO
Colette 1 year ago
I think option A sounds familiar, but I'm not entirely sure how route leaking works in this context.
TH
Thersa 1 year ago
This is a tricky one, but I'm feeling confident. I'm leaning towards option B, filter-based forwarding, as it seems to directly address the requirement of limiting access without a firewall.
MI
Mila 1 year ago
Based on the details provided, I think option A with EVPN and a routing policy could be a good solution. It seems like it would allow me to control the traffic without a full firewall.
GA
Gaynell 1 year ago
I'm a bit confused by the wording of the question. Does "route leaking" mean something specific in this context? I'll need to review that concept before deciding.
DO
Dorethea 1 year ago
Okay, let's see. The key here is limiting access to a specific traffic type without going through a firewall. I think option B, using filter-based forwarding, might be the way to go.
CH
Chara 1 year ago
Hmm, this seems like a tricky one. I'll need to think through the options carefully to make sure I understand the requirements.
HE
Henriette 1 year ago
Hmm, I'm a bit confused by the wording of the question. Does the fact that Unit A has those extra profile options mean that all transactions get automatically assigned there, or is it just that Paul can only create them for that unit? I'll have to re-read it carefully.
AD
Adolph 1 year ago
Hmm, I wonder if we can use a magic spell to teleport the new server into a secure bubble. Might be faster than these networking options!
JO
Jodi 1 year ago
↳ replying to Adolph
C) Put the new server on a unique subnet within the tenant's network.
CA
Candida 1 year ago
↳ replying to Adolph
B) Use filter-based forwarding.
PE
Penney 1 year ago
↳ replying to Adolph
A) Use route leaking with EVPN and a routing policy.
SU
Susana 1 year ago
Hey, at least they're not asking us to set up a firewall made of duct tape and paperclips! That's progress, right?
DI
Diego 1 year ago
D) is a valid choice, but using a static route with a firewall as the next hop feels a bit clunky. I'd prefer a more dynamic solution if possible.
HA
Haley 1 year ago
↳ replying to Diego
D) Use a static route in the tenant VRF with a firewall as the next hop for traffic to the new server.
TO
Torie 1 year ago
↳ replying to Diego
B) Use filter-based forwarding.
TA
Tarra 1 year ago
↳ replying to Diego
A) Use route leaking with EVPN and a routing policy.
FE
Felicidad 1 year ago
C) is an interesting option, but I'm not sure it fully satisfies the requirement of limiting access without going through a firewall.
LE
Leslie 1 year ago
↳ replying to Felicidad
C) Put the new server on a unique subnet within the tenant's network.
MA
Marylin 1 year ago
↳ replying to Felicidad
B) Use filter-based forwarding.
DE
Delila 1 year ago
↳ replying to Felicidad
A) Use route leaking with EVPN and a routing policy.
SH
Shoshana 2 years ago
I'm leaning towards A) with the EVPN route leaking. That seems like a more elegant and scalable approach compared to the other options.
LE
Lenita 1 year ago
↳ replying to Shoshana
User 2: Yeah, it's definitely a more elegant solution compared to the other choices.
AM
Amalia 1 year ago
↳ replying to Shoshana
User 1: I agree, using route leaking with EVPN seems like the best option.
LY
Lynette 2 years ago
Hmm, I think B) is the way to go. Filter-based forwarding sounds like the perfect solution to limit access without going through a firewall.
FL
Floyd 2 years ago
Hmm, I see your point. But I still think option A) provides more flexibility and control over the traffic.
RI
Ria 2 years ago
I disagree, I believe option B) using filter-based forwarding would be a better solution.
FL
Floyd 2 years ago
I think option A) using route leaking with EVPN and a routing policy could work.
0/2000 characters

Save Cancel