300-410 VRF-Lite Practice Test 2 — 15 Questions

Question 1

A network engineer runs the following command on Router R1:

R1# show ip vrf detail RED
VRF RED (VRF Id = 1); default RD <not set>
   Interfaces:
           GigabitEthernet0/2
           Loopback1
   Address family IPV4 (Table ID = 1):
      No Export VPN route-target communities
      No Import VPN route-target communities
      No import route-map
      No export route-map
      VRF label distribution protocol: not configured
   Address family IPV6 (Table ID = 0x1E000001):
      No Export VPN route-target communities
      No Import VPN route-target communities
      No import route-map
      No export route-map
      VRF label distribution protocol: not configured

Based on this output, which statement is correct?

Accepted Answer

The VRF RED includes two interfaces: GigabitEthernet0/2 and Loopback1.. The 'show ip vrf detail RED' command shows detailed VRF information. It lists interfaces GigabitEthernet0/2 and Loopback1. The RD is not set, which is common for VRF-Lite (no MPLS). There are no route-target communities, which is expected for VRF-Lite.

Answer

The VRF RED has a Route Distinguisher configured.

Answer

The VRF RED has an export route-map configured.

Answer

The VRF RED is configured for MPLS label distribution.

Question 2

A network engineer runs the following command on Router R1:

R1# show ip bgp vpnv4 vrf RED neighbors 10.1.1.2 advertised-routes

BGP table version is 5, local router ID is 192.168.0.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
              x best-external, a additional-path, c RIB-compressed,
              t secondary path, L long-lived-stale,
Origin codes: i - IGP, e - EGP, ? - incomplete

Network          Next Hop            Metric LocPrf Weight Path
*> 192.168.1.0/24   0.0.0.0                  0         32768 i
*> 192.168.2.0/24   0.0.0.0                  0         32768 i

Total number of prefixes 2

Based on this output, what is the problem?

Accepted Answer

The routes are being advertised correctly.. The output shows the routes advertised to BGP neighbor 10.1.1.2 for VRF RED. It advertises two networks: 192.168.1.0/24 and 192.168.2.0/24, both with next hop 0.0.0.0 (meaning self). This is normal. However, the next hop 0.0.0.0 might be problematic if the neighbor expects a valid next hop. But in BGP, 0.0.0.0 is used for locally originated routes. The problem could be that the routes are not being advertised with the correct next hop, but for VRF-Lite, this is typical. Actually, no problem is evident. The correct answer might be that the routes are being advertised correctly.

Answer

The routes are advertised with next hop 0.0.0.0, which will cause the neighbor to drop them.

Answer

The BGP table version is 5, indicating a problem.

Answer

The routes have weight 0, which is incorrect.

Question 3

A network engineer runs the following command on Router R1:

R1# show ip route vrf RED 192.168.1.0

Routing entry for 192.168.1.0/24
  Known via "connected", distance 0, metric 0 (connected, via interface)
  Routing Descriptor Blocks:
  * directly connected, via GigabitEthernet0/2
      Route metric is 0, traffic share count is 1

Based on this output, which statement is correct?

Accepted Answer

The route is directly connected via GigabitEthernet0/2.. The output shows the route for 192.168.1.0/24 in VRF RED is a connected route via GigabitEthernet0/2. This is normal.

Answer

The route is learned via OSPF.

Answer

The route is a static route.

Answer

The route has a metric of 1.

Question 4

Given the following partial configuration on router R1:
```
interface GigabitEthernet0/0
 ip vrf forwarding CUSTOMER_A
 ip address 192.168.1.1 255.255.255.0
```
What is the effect of this configuration?

Accepted Answer

The interface is placed into VRF CUSTOMER_A, and the IP address is assigned correctly.. The 'ip vrf forwarding' command associates the interface with a VRF. It removes the IP address if one was previously configured, requiring it to be re-applied. This ensures traffic on this interface is forwarded using the VRF's routing table.

Answer

The interface is placed into VRF CUSTOMER_A, but the IP address is ignored because it must be configured before the VRF command.

Answer

The VRF name is misspelled; it should be 'vrf forwarding CUSTOMER_A' under the interface.

Answer

The configuration will fail because VRF CUSTOMER_A must be created globally first.

Question 5

Consider this partial configuration:
```
ip vrf CUSTOMER_B
 rd 65000:1
 route-target export 65000:1
 route-target import 65000:1
```
What statement is true about this VRF configuration?

Accepted Answer

The VRF is correctly configured for VRF-Lite with a unique RD and optional route-targets.. In VRF-Lite, route-targets are not strictly required because there is no MP-BGP exchange. However, they are used for interoperability and to define import/export policies if needed. The RD is mandatory to create the VRF.

Answer

The VRF will not function because route-targets are mandatory for VRF-Lite.

Answer

The RD must match the route-target value exactly.

Answer

The VRF will only work if 'vrf forwarding' is applied to an interface.

Question 6

Examine the following configuration:
```
interface GigabitEthernet0/1
 ip vrf forwarding CUSTOMER_C
 ip address 10.1.1.1 255.255.255.0
 no shutdown
```
What is missing from this configuration to ensure that routes from VRF CUSTOMER_C are properly isolated?

Accepted Answer

Nothing is missing; this configuration provides proper VRF isolation.. The configuration is complete for basic VRF-Lite. VRF isolation is achieved by associating the interface with a VRF, which creates a separate routing table. No additional commands are required for isolation.

Answer

A route-target import/export statement under the VRF definition.

Answer

The command 'ip vrf forwarding CUSTOMER_C' must be preceded by 'no ip address' to avoid IP address removal.

Answer

A 'vrf definition CUSTOMER_C' must be used instead of 'ip vrf' on newer IOS versions.

Question 7

Given this configuration on router R2:
```
ip vrf CUSTOMER_D
 rd 100:1
!
interface GigabitEthernet0/0
 ip vrf forwarding CUSTOMER_D
 ip address 192.168.2.1 255.255.255.0
!
router ospf 1 vrf CUSTOMER_D
 network 192.168.2.0 0.0.0.255 area 0
```
What will happen when this configuration is applied?

Accepted Answer

OSPF will run on GigabitEthernet0/0 and form adjacencies within VRF CUSTOMER_D.. The OSPF process is tied to VRF CUSTOMER_D, so it only runs on interfaces that belong to that VRF. The network command matches the interface, so OSPF will form adjacencies on that interface within the VRF.

Answer

OSPF will fail because the OSPF process must be configured globally, not under the VRF.

Answer

OSPF will run on all interfaces, including those not in VRF CUSTOMER_D.

Answer

The network command is invalid because it uses a wildcard mask instead of a subnet mask.

Question 8

Consider the following configuration:
```
ip vrf CUSTOMER_E
 rd 200:1
 route-target export 200:1
 route-target import 200:1
!
interface GigabitEthernet0/0
 ip vrf forwarding CUSTOMER_E
 ip address 172.16.0.1 255.255.255.0
!
interface GigabitEthernet0/1
 ip vrf forwarding CUSTOMER_E
 ip address 172.16.1.1 255.255.255.0
```
What is the effect of the route-target commands in this VRF-Lite scenario?

Accepted Answer

The route-targets are ignored because VRF-Lite does not use MP-BGP.. In VRF-Lite, route-targets are not used unless route leaking is configured. They are typically used in MPLS VPN environments. Here, they have no effect because there is no MP-BGP or route leaking configured.

Answer

The route-targets enable automatic route redistribution between VRFs.

Answer

The route-targets cause the VRF to import and export routes from the global routing table.

Answer

The configuration will fail because route-targets are not allowed in VRF-Lite.

Question 9

Examine this partial configuration:
```
interface GigabitEthernet0/0
 ip vrf forwarding CUSTOMER_F
 ip address 10.10.10.1 255.255.255.0
!
interface GigabitEthernet0/1
 ip vrf forwarding CUSTOMER_G
 ip address 10.10.20.1 255.255.255.0
```
What is required to enable communication between VRF CUSTOMER_F and VRF CUSTOMER_G?

Accepted Answer

Add static routes with the 'vrf' keyword to point to the other VRF's next hop.. By default, VRFs are isolated. To enable communication between them, route leaking must be configured, typically using static routes with the 'vrf' keyword or using route-replicate commands.

Answer

No additional configuration is needed; VRFs can communicate by default.

Answer

Configure a route-map and import/export route-targets between the VRFs.

Answer

Use the 'ip route vrf' command to create a global route that points to the VRF interface.

Question 10

What is the default route distinguisher (RD) format when using the 'ip vrf' command without specifying an RD?

Accepted Answer

The VRF will not be created until an RD is configured.. The RD is mandatory when creating a VRF. If not specified, the VRF will not be created. There is no default RD.

Answer

The RD defaults to 0:0.

Answer

The RD is automatically derived from the router ID.

Answer

The RD defaults to the ASN:1 format.

Question 11

In VRF-Lite, which routing protocols can be used within a VRF?

Accepted Answer

OSPF, EIGRP, RIP, and BGP can all be configured per VRF.. Most routing protocols (RIP, EIGRP, OSPF, BGP) support VRF-aware configurations. The protocol must be configured with the 'vrf' keyword to operate within a specific VRF.

Answer

Only static routing is supported in VRF-Lite.

Answer

Only OSPF and EIGRP are supported in VRF-Lite.

Answer

BGP cannot be used within a VRF in VRF-Lite.

Question 12

What is the maximum number of VRFs that can be configured on a Cisco IOS router?

Accepted Answer

Platform-dependent, typically limited by available memory.. The maximum number of VRFs is platform-dependent. There is no fixed IOS-wide limit; it varies based on hardware and software resources.

Answer

256

Answer

1024

Answer

Unlimited

Question 13

Which TWO commands can be used to verify the VRF configuration and associated interfaces on a Cisco IOS-XE router running VRF-Lite? (Choose TWO.)

Accepted Answer

show vrf. The 'show vrf' command displays a summary of all VRFs, including their RD and interfaces, while 'show ip vrf interfaces' lists each VRF with its associated interfaces and IP addresses. The other options are incorrect: 'show ip route vrf' shows the routing table for a specific VRF but not the interfaces, 'show running-config | section vrf' shows configuration but not operational status, and 'show ip interface brief' does not display VRF information.

Answer

show ip route vrf <vrf-name>

Answer

show running-config | section vrf

Answer

show ip interface brief

Question 14

Which TWO statements are true regarding the use of VRF-Lite in a Cisco Enterprise network? (Choose TWO.)

Accepted Answer

VRF-Lite enables multiple virtual routing tables on a single router, providing traffic separation without MPLS.. VRF-Lite allows multiple routing tables on a single router, enabling traffic separation without MPLS. It relies on static routes or dynamic routing protocols like OSPF, EIGRP, or BGP within each VRF. The incorrect options: MPLS is not required for VRF-Lite; VRF-Lite does not support MPLS VPNv4 route exchange (that requires MPLS); and VRF-Lite does not inherently provide encryption.

Answer

VRF-Lite requires MPLS to exchange VPNv4 routes between routers.

Answer

VRF-Lite can automatically encrypt traffic between VRFs using IPsec.

Answer

VRF-Lite can only be used with static routing.

Question 15

Which TWO configuration steps are required to enable VRF-Lite on a Cisco IOS-XE router for a customer with two separate routing domains? (Choose TWO.)

Accepted Answer

Create the VRF using the 'vrf definition ' command and assign a route distinguisher with the 'rd' command.. The two essential steps are: creating the VRF with a route distinguisher using 'vrf definition ' and 'rd ', and assigning interfaces to the VRF with 'vrf forwarding ' under the interface. The other options are incorrect: 'ip vrf ' is legacy syntax but still works; however, 'rd' is required. Route targets are for MPLS VPN, not VRF-Lite. Import/export maps are optional. BGP is not mandatory.

Answer

Configure route target import/export statements under the VRF.

Answer

Apply an import map and export map to control route redistribution.

Answer

Enable BGP to exchange routes between VRFs.