Juniper JN0-664 Exam - Topic 3 Question 11 Discussion

Actual exam question for Juniper's JN0-664 exam

Question #: 11
Topic #: 3

When building an interprovider VPN, you notice on the PE router that you have hidden routes which are received from your BGP peer with family inet labeled-unica3t configured.

Which parameter must you configure to solve this problem?

AUnder the family inet labeled-unicast hierarchy, add the explicit null parameter.

BUnder the protocols ospf hierarchy, add the traffic-engineering parameter.

CUnder the family inet labeled-unicast hierarchy, add the resolve-vpn parameter.

DUnder the protocols mpls hierarchy, add the traffic-engineering parameter

Show Suggested Answer

Suggested Answer: C

The resolve-vpn parameter is a BGP option that allows a router to resolve labeled VPN-IPv4 routes using unlabeled IPv4 routes received from another BGP peer with family inet labeled-unicast configured. This option enables interprovider VPNs without requiring MPLS labels between ASBRs or using VRF tables on ASBRs. In this scenario, you need to configure the resolve-vpn parameter under [edit protocols bgp group external family inet labeled-unicast] hierarchy level on both ASBRs.

by Whitley at Sep 04, 2023, 02:40 AM

Limited Time Offer

25%

Off

Get Premium JN0-664 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ona

5 months ago

Nope, explicit null is definitely the way to go!

upvoted 0 times

...

Ellsworth

5 months ago

I thought it was the resolve-vpn parameter?

upvoted 0 times

...

Portia

6 months ago

Wait, are we sure about that? Seems too simple.

upvoted 0 times

...

Bernadine

6 months ago

Totally agree, that's the right move!

upvoted 0 times

...

Dannette

6 months ago

You need to add the explicit null parameter.

upvoted 0 times

...

Aide

6 months ago

I remember discussing hidden routes, and I think the explicit null option makes sense. But what if it’s the resolve-vpn? I wish I had reviewed that section more thoroughly.

upvoted 0 times

...

Rosendo

6 months ago

I keep mixing up the OSPF and MPLS configurations. I thought the traffic-engineering parameter was important, but I can't recall which hierarchy it belongs to.

upvoted 0 times

...

Gerald

7 months ago

I'm not entirely sure, but I feel like the resolve-vpn parameter could be the right choice. We had a similar question in our study group.

upvoted 0 times

...

Christoper

7 months ago

I think we might need to add the explicit null parameter under the family inet labeled-unicast. I remember something about that from our last practice session.

upvoted 0 times

...

Sherron

7 months ago

This seems straightforward. The "resolve-vpn" parameter under the "family inet labeled-unicast" hierarchy is likely the solution to the problem described in the question.

upvoted 0 times

...

Rikki

7 months ago

Okay, I think I've got this. The "explicit null" parameter under the "family inet labeled-unicast" hierarchy should do the trick to solve the problem.

upvoted 0 times

...

Hyman

7 months ago

Hmm, the key seems to be the "family inet labeled-unicast" configuration on the PE router. I'm guessing we need to add a parameter under that hierarchy to resolve the issue.

upvoted 0 times

...

Claudio

7 months ago

This looks like a tricky one. I'll need to carefully read through the options and think about what the "hidden routes" and "family inet labeled-unicast" configuration might be indicating.

upvoted 0 times

...

Merilyn

7 months ago

I'm a bit confused by the terminology here. "Hidden routes" and "family inet labeled-unicast" aren't terms I'm super familiar with. I'll need to think this through carefully.

upvoted 0 times

...

Valentin

7 months ago

I think I know the answer to this one. Gateway-required virtual network integration should do the trick and restrict access to the web apps through the Front Door instance. I'm pretty confident in this solution.

upvoted 0 times

...

Lai

7 months ago

Whoa, this is a lot of networking stuff to remember. I better make sure I have the syntax for those nmcli commands down before I try this on the exam.

upvoted 0 times

...