Juniper JN0-650 Exam Questions

The exhibit shows a BGP Route Reflector (RR) configuration where an export policy named NHS (Next-Hop Self) is applied to the internal BGP group int-group. The policy NHS sets the next-hop self attribute for BGP routes.

The Problem (Traffic Tromboning): In a standard BGP Route Reflector design, the RR should reflect routes without modifying the BGP next-hop attribute. By applying a next-hop self policy on the export to clients, the RR tells all its clients that it is the exit point for those routes. Consequently, all data plane traffic is sent to the RR first before being forwarded to the actual destination, rather than following the optimal direct path between clients. This is known as 'traffic tromboning' or suboptimal routing.

The Solution (Option C): The most direct way to fix this is to delete the export policy that is forcing the next-hop to be the RR. By deleting protocols bgp group int-group export NHS, the RR will resume standard behavior and reflect the original next-hop received from the route source, allowing clients to route traffic directly to the correct destination.

The Refined Solution (Option D): If you must keep the NHS policy (perhaps for routes learned from external peers), you should ensure it only applies to those specific routes. By adding from route-type internal to the policy term and then potentially changing the logic (or simply narrowing the scope), you can prevent the RR from incorrectly applying next-hop self to internal routes that it is merely reflecting. In the context of this specific problem, Option D combined with a change in the policy's action or scope helps ensure reflected internal routes maintain their original, optimal next-hops.

Option A is incorrect because setting next-hop self for external routes is common practice, but it doesn't solve the problem of internal reflected routes being diverted to the RR.

Option B is incorrect because applying this as an import policy would change how the RR itself sees the routes, but it wouldn't fix the attributes being sent out to the clients in the reflection process.

The exhibit shows the Class of Service (CoS) transmit queue information for interface ge-0/0/11. To determine the correct behavior, we must analyze the bandwidth allocations and the queue limit settings:

Bandwidth Calculation (Option A): In Junos OS, when multiple queues are assigned specific percentages of bandwidth, the 'remainder' (represented by 'r') is the total interface bandwidth minus the sum of the explicitly configured percentages.

Bandwidth assigned to Queue 1 (EF) = 10%.

Bandwidth assigned to Queue 2 (AF) = 10%.

Bandwidth assigned to Queue 3 (NC) = 4%.

Total explicitly assigned = $10\% + 10\% + 4\% = 24\%$.

Remainder for Queue 0 (Best Effort) = $100\% - 24\% = 76\%$.

'Limit: exact' Behavior (Option B): The exhibit shows that Queue 2 (assured-forwarding) has a Limit set to exact.

By default, a queue in Junos can consume more than its allocated bandwidth if other queues are idle.

However, when the exact keyword is applied to the transmit-rate (transmission rate), the queue is strictly rate-limited to its configured percentage.

This means that traffic in Queue 2 will be capped at 10% of the interface bandwidth regardless of whether the network is congested or not. If the traffic exceeds 10%, the excess will be dropped or buffered to match the exact rate.

Option C is incorrect because 100% of the bandwidth is not reserved for a single queue; it is distributed across four queues.

Option D is less accurate than B because it implies the drop behavior only occurs during congestion. The exact parameter enforces the limit even when the rest of the interface is completely idle.

In a Juniper Q-in-Q (Layer 2 tunneling) environment, VLAN rewrites (specifically the swap operation) provide the most granular control over how customer traffic (C-VLANs) is mapped to service provider traffic (S-VLANs).

VLAN Rewrites (The Swap Operation): This method involves replacing the incoming customer VLAN tag with a service provider tag as the frame enters the tunnel. This is technically a 'swap' because the original C-VLAN tag is removed and the S-VLAN tag is written in its place. At the egress of the tunnel, the S-VLAN tag is swapped back for the original C-VLAN tag. This is often used when different customers use the same C-VLAN IDs and the provider needs to keep them unique within their core.

Many-to-Many: This is a mapping style where multiple customer VLANs are mapped to multiple service provider VLANs, but it typically relies on the 'push' (stacking) operation rather than a literal 'swap' of the tag itself.

All-in-One: This is the simplest form of Q-in-Q where all traffic entering an interface is 'pushed' into a single S-VLAN tag, regardless of any existing C-VLAN tags. No swapping occurs; the original tags are simply buried under the new provider tag.

L2PT (Layer 2 Protocol Tunneling): This is a feature used to tunnel Layer 2 control protocols (like STP, CDP, or LLDP) across a provider network by encapsulating them or changing their destination MAC addresses. It does not involve the swapping of VLAN tags.

In an EVPN-VXLAN environment using ESI-LAG (Ethernet Segment Identifier Link Aggregation), the Core Isolation feature is a safety mechanism designed to prevent traffic blackholing. When a leaf switch (acting as a VTEP) loses its BGP peering or its link to the IP fabric core, it assumes it is 'isolated' from the rest of the network. To protect the network, the switch automatically shuts down its local member links of any multi-homed ESI-LAG to force traffic to the peer switch that still has core connectivity.

However, during a migration or in specific transitional topologies where the core might be temporarily unreachable or not yet fully established, this feature can cause the leaf switches to shut down all downstream IDF (Intermediate Distribution Frame) connections, leading to a total loss of connectivity.

The Solution (Option C): By enabling the no-core-isolation statement under the [edit protocols evpn] hierarchy, you instruct the switch to disable this automatic shutdown behavior. This ensures that even if the BGP session or core links are not yet stable during the migration process, the ESI-LAG interfaces remain Up, allowing the IDFs to maintain connectivity to their local default gateways or other local resources.

Why others are incorrect: Enabling EVPN-VXLAN before migration (Option A) does not address the isolation logic. Removing MC-LAG/Virtual Chassis links prematurely (Option B) would cause an immediate outage. The network-isolation-profile (Option D) is typically used for different loop prevention scenarios and does not override the specific core-isolation check that affects multi-homed ESIs.

In enterprise networks utilizing Junos OS, IBGP (Internal BGP) route flapping is frequently caused by recursive routing failures within the underlying IGP (Interior Gateway Protocol), such as OSPF or IS-IS.

Recursive Next-Hop Resolution: Unlike EBGP, where the neighbor is typically directly connected, IBGP neighbors are often several hops away. Consequently, an IBGP route's protocol next-hop is usually a loopback IP address that requires a recursive lookup to resolve. The router must consult its unicast routing table (typically inet.0 or inet.3) to find a physical path to that next-hop.

The Flapping Mechanism: A 'flap' occurs when a route is repeatedly withdrawn and readvertised. If the IGP path used to resolve the BGP next-hop becomes unstable or if the BGP route itself is inadvertently used to resolve its own next-hop (a recursive loop), the BGP next-hop becomes unreachable.

Impact on Routing Table: When the next-hop cannot be resolved, the BGP route is considered invalid and is withdrawn from the routing table. Once the route is withdrawn, the original IGP path to the next-hop often becomes valid again, causing the BGP route to be readvertised. This cycle of withdrawal and readvertisement creates the instability known as flapping.

Why other options are incorrect: Packet misordering (Option A) and community tagging (Option B) may affect performance or policy but do not cause a route to be withdrawn and readvertised in this cyclical manner. While update intervals (Option C) control how quickly changes are sent, they are not the root cause of the reachability failure that triggers the flap itself.