ACSP EVPN-VXLAN and Network Virtualization 3

Question 1

In Aruba AOS-CX EVPN-VXLAN, what is the primary purpose of a VRF (Virtual Routing and Forwarding) instance for tenant networks?

Accepted Answer

To provide Layer 3 tenant isolation by maintaining a separate, independent routing table per tenant

Answer

To separate management traffic from data-plane forwarding

Answer

To define VXLAN encapsulation parameters and VNI-to-VLAN mappings

Answer

To manage BGP peer relationships and route reflector sessions between VTEPs

Question 2

How does EVPN use Type-3 (Inclusive Multicast Ethernet Tag) routes to handle BUM traffic distribution?

Accepted Answer

Type-3 routes advertise each VTEP's address to other VTEPs for ingress replication of BUM traffic

Answer

Type-3 routes signal multicast group membership for underlay multicast-based BUM forwarding

Answer

Type-3 routes suppress all BUM traffic by converting broadcasts to targeted unicast

Answer

Type-3 routes redirect all BUM traffic to a dedicated central BUM replication server

Question 3

What is the Ethernet Segment Identifier (ESI) used for in EVPN multi-homing scenarios?

Accepted Answer

To uniquely identify the set of links connecting a customer edge device to multiple provider edge VTEPs

Answer

To identify the VNI associated with a multi-homed customer site's traffic

Answer

To encrypt traffic exchanged between a pair of multi-homed VTEPs

Answer

To designate the single elected Designated Forwarder VTEP for all traffic types

Question 4

What is a BGP Route Target (RT) in EVPN and what does it control?

Accepted Answer

An RT is a BGP extended community that controls which VRFs import and export specific EVPN routes

Answer

An RT controls which BGP peers are permitted to establish EVPN sessions

Answer

An RT defines the administrative distance assigned to all EVPN-learned routes

Answer

An RT specifies the VXLAN UDP encapsulation port used between specific VTEP pairs

Question 5

How does EVPN-VXLAN achieve isolation for tenants with overlapping IP address spaces?

Accepted Answer

By assigning each tenant a unique L2 VNI for bridging and a unique L3 VNI plus VRF for routing

Answer

By using different UDP source ports for each tenant's VXLAN-encapsulated traffic

Answer

By encrypting each tenant's traffic with a tenant-specific symmetric key

Answer

By deploying per-tenant NAT at the fabric border to translate overlapping addresses

Question 6

Which Aruba AOS-CX CLI command is used to display VXLAN VTEP status and information about discovered remote tunnel peers?

Accepted Answer

show vxlan vteps

Answer

show interface vxlan

Answer

show vxlan vni

Answer

show nve peers

Question 7

What is the recommended underlay MTU configuration for a VXLAN deployment to prevent fragmentation of encapsulated tenant frames?

Accepted Answer

9000 bytes or larger (jumbo frames)

Answer

1500 bytes (standard Ethernet MTU)

Answer

1550 bytes (standard MTU plus estimated VXLAN overhead)

Answer

1600 bytes (standard MTU plus a 100-byte buffer)