JNCIP-ENT Practice Question: Configuring an EVPN-VXLAN fabric with a distributed gateway (anycast gateway) to optimize…
You are configuring an EVPN-VXLAN fabric with a distributed gateway (anycast gateway) to optimize routing for hosts in different subnets. You need to ensure that the distributed gateway functions correctly. Which TWO statements are true about the distributed gateway implementation on Juniper devices? (Choose two.)
⚠ Common exam trap
The trap here is assuming that each leaf needs a unique gateway IP or MAC, which would contradict the anycast concept and cause host configuration issues.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Each leaf switch uses the same virtual MAC address for the anycast gateway, allowing hosts to use a single default gateway IP.
In a distributed gateway (anycast gateway) deployment, all leaf switches in the same subnet share a common virtual MAC address and IP address for the gateway. This allows hosts to use a single default gateway configuration and ensures that traffic is routed locally at the attached leaf, avoiding suboptimal paths. Additionally, all leaf switches must use the same VXLAN VNI for that subnet to maintain consistent forwarding and encapsulation across the fabric.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Each leaf switch uses the same virtual MAC address for the anycast gateway, allowing hosts to use a single default gateway IP.
Why this is correct
In a distributed gateway, all leaf switches that participate in the same subnet use a common virtual MAC address for the anycast gateway. This allows hosts to use the same default gateway IP and MAC regardless of which leaf they are attached to. When a host sends traffic to the gateway, it is handled locally by the attached leaf, providing optimal routing and avoiding tromboning. This is a fundamental characteristic of anycast gateway.
- ✗
The anycast gateway IP address must be unique on each leaf switch to avoid IP conflicts.
Why it's wrong here
In a distributed gateway, the anycast gateway IP address is shared across all leaf switches in the same subnet. It is not unique per leaf; instead, it is a common virtual IP that hosts use as their default gateway. Using unique IPs would defeat the purpose of anycast gateway, as hosts would need different gateway addresses depending on their location. Therefore, this statement is incorrect.
- ✗
The anycast gateway requires that all leaf switches are in the same OSPF area for underlay connectivity.
Why it's wrong here
The anycast gateway operates at the overlay layer and does not mandate a specific underlay IGP area configuration. While underlay connectivity is necessary, it can be achieved with various IGPs and area designs. The requirement is that leaf switches have IP reachability to each other, but they do not need to be in the same OSPF area. Thus, this statement is not a requirement for anycast gateway.
- ✓
The anycast gateway requires that all leaf switches use the same VXLAN VNI for the subnet to ensure consistent forwarding.
Why this is correct
For the distributed gateway to function correctly, all leaf switches that host the same subnet must use the same VXLAN VNI. This ensures that traffic from a host on one leaf to a host on another leaf is encapsulated with the correct VNI and can be forwarded appropriately. The VNI is part of the EVPN Type 2 and Type 5 route advertisements, and consistency is required for proper routing and bridging.
- ✗
The anycast gateway MAC address must be manually configured on each leaf and must be different for each leaf.
Why it's wrong here
The anycast gateway MAC address is a virtual MAC that is shared across all leaf switches in the same subnet. It is typically configured identically on all leaf switches, often using a well-known MAC address like 00:00:5e:00:01:01. It must not be different per leaf, as that would break the anycast concept and cause hosts to see inconsistent gateway MACs. Therefore, this statement is false.
Visual reference
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
About these practice questions
Courseiva writes every JNCIP-ENT question from scratch — 264 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
You might also like
Similar JNCIP-ENT questions
- Which TWO of the following statements regarding EVPN Route Type 1 (Ethernet Auto-Discovery Route) are correct? (Choose t…
- You are troubleshooting an EVPN-VXLAN fabric where a host connected to a multi-homed Ethernet segment is not receiving t…
- Which command allows an operator to view the local and remote MAC addresses learned via EVPN control plane and data plan…
- An administrator is deploying EVPN multi-homing with all-active mode on an MX Series router. Which configuration element…
- You are troubleshooting an EVPN-VXLAN fabric where a host behind Leaf 1 is unable to communicate with a host behind Leaf…
Written and reviewed by Johnson Ajibi, MSc IT Security
Security Systems Architect · founder of Courseiva
Last reviewed September 2026 · checked against the official Juniper Networks exam blueprint
This JNCIP-ENT practice question is part of Courseiva's free Juniper Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the JNCIP-ENT exam.