The answer is a missing route-target configuration for VNI 5002 under the VRF TenantA address-family l2vpn evpn. In VXLAN EVPN, route-target import and export statements are essential for the VTEP to exchange EVPN type-2 (MAC/IP) and type-3 (IMET) routes with its peers; without them, the VTEP cannot learn the default gateway’s MAC address or the inclusive multicast Ethernet tag route needed for BUM traffic. This is a classic troubleshooting scenario on the Cisco DCCOR 350-601 exam, where the question presents a working VNI 5001 (with route-targets) alongside a failing VNI 5002 (without them) to test your understanding of how EVPN route distribution controls reachability. A common trap is to blame the VLAN-to-VNI mapping or the anycast gateway configuration, but the real culprit is the missing route-target under the L2VPN EVPN address-family. Memory tip: “No RT, no route” — if you can’t ping the gateway, check the route-target import/export first.
350-601 Network Practice Question
This 350-601 practice question tests your understanding of network. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Exhibit
vrf context TenantA
ip route 0.0.0.0/0 10.1.1.1
evn
vni 5001 l2
vni 5002 l2
rd 1.1.1.1:1
route-target import 65000:5001
route-target export 65000:5001
!
interface nve1
source-interface loopback0
member vni 5001 associate-vrf
member vni 5002 associate-vrf
Refer to the exhibit. A network administrator configured VXLAN EVPN as above. The VTEP can communicate with neighbors on VNI 5001, but cannot reach the default gateway for VNI 5002. What is the problem?
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The route-target for VNI 5002 is missing.
The VXLAN EVPN configuration for VNI 5002 is missing the route-target import/export statements under the VRF TenantA address-family l2vpn evpn. Without the route-target, the VTEP cannot import EVPN type-2 and type-3 routes for VNI 5002, preventing it from learning the default gateway's MAC/IP or the IMET route needed for BUM traffic. This explains why the VTEP can communicate on VNI 5001 (which has route-targets) but not reach the gateway on VNI 5002.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
The default route in VRF TenantA is not exported.
Why it's wrong here
The default route is present, but without an export route-target for VNI 5002, it cannot be advertised via EVPN.
✓
The route-target for VNI 5002 is missing.
Why this is correct
The configuration lacks a separate RD and route-target for VNI 5002, preventing EVPN route exchange for that VNI.
Related concept
Read the scenario before looking for a memorised answer.
✗
The VNI 5002 does not have an associated VLAN.
Why it's wrong here
The VNI is associated with a VRF using 'associate-vrf', which is correct for Layer 3 VNI; no VLAN needed.
✗
The NVE interface does not have ingress-replication configured.
Why it's wrong here
Ingress replication is for BUM traffic, not for unicast routing to the default gateway.
Common exam traps
Common exam trap: answer the scenario, not the keyword
Cisco often tests the distinction between Layer 2 VNI (which needs VLAN association and ingress-replication) and Layer 3 VNI (which needs route-target configuration), and the trap here is that candidates assume a missing VLAN or ingress-replication is the root cause, when the real issue is the missing route-target for the Layer 3 VNI under the VRF.
Detailed technical explanation
How to think about this question
In VXLAN EVPN, route-targets control the import and export of EVPN routes between VRFs and the BGP EVPN address-family. For a Layer 3 VNI (used for IRB), the route-target must match between the VTEP and the EVPN peers; without it, the VTEP cannot install the gateway's anycast MAC (virtual MAC) or host routes into its forwarding table. This is analogous to MPLS L3VPN where RT mismatches cause route filtering, but in EVPN the same principle applies to MAC/IP advertisement routes (type-2) and IMET routes (type-3).
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A network engineer at a university connects two campus buildings via a fibre link. Both routers run OSPF, but no adjacency forms — even though both routers can ping each other. The engineer finds one router is in area 0 and the other in area 1. OSPF adjacency requires matching area numbers, hello/dead timers, and network type. IP reachability alone is not enough.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Network — This question tests Network — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: The route-target for VNI 5002 is missing. — The VXLAN EVPN configuration for VNI 5002 is missing the route-target import/export statements under the VRF TenantA address-family l2vpn evpn. Without the route-target, the VTEP cannot import EVPN type-2 and type-3 routes for VNI 5002, preventing it from learning the default gateway's MAC/IP or the IMET route needed for BUM traffic. This explains why the VTEP can communicate on VNI 5001 (which has route-targets) but not reach the gateway on VNI 5002.
What should I do if I get this 350-601 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This 350-601 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-601 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.