Juniper JN0-664 Exam Questions

OSPF uses different types of LSAs to describe different aspects of the network topology. Type 1 LSAs are also known as router LSAs, and they describe the links and interfaces of a router within an area. Type 3 LSAs are also known as summary LSAs, and they describe routes to networks outside an area but within the same autonomous system (AS). By default, OSPF will summarize routes from Type 1 LSAs into Type 3 LSAs when advertising them across area boundaries .

The exhibit shows the configuration of a VRF (Virtual Routing and Forwarding) instance on a Juniper PE router. Let's break down the key components:

VRF Configuration (VPN-A)

The instance type is VRF, meaning this is an L3VPN (Layer 3 VPN).

The routing instance contains a static route (10.1.0.0/16 next-hop 10.1.0.1).

The interface ge-0/0/2.0 is assigned to the VRF.

Route Distinguisher (RD): 172.17.20.1:1

VRF-Export Policy: vpn-a-export

VRF-Target: target:65512:1 (This defines which routes will be imported into the VRF).

VRF Export Policy (vpn-a-export)

The vpn-a-export policy adds two BGP communities (route targets) to exported VPN routes:

community add vpn-a-target;

community add vpn-m-target;

accept;

The vpn-a-target community corresponds to target:65512:1.

The vpn-m-target community corresponds to target:65512:2.

Policy-Options (Community Definitions)

community vpn-a-target members target:65512:1;

community vpn-m-target members target:65512:2;

This confirms that routes exported from this VRF will have BOTH target:65512:1 and target:65512:2.

Evaluating the Answer Choices

Option A: 'VPN routes are exported with the target:65512:1 and target:65512:2 route targets.'

The vpn-a-export policy explicitly adds both vpn-a-target (65512:1) and vpn-m-target (65512:2) to exported routes.

This is correct.

Option B: 'You cannot use the vrf-target and vrf-export statements in the same VRF.'

This is incorrect.

Juniper allows the use of both vrf-target and vrf-export in the same VRF:

vrf-target is used for importing routes.

vrf-export defines export policies (which can add additional route targets).

This is incorrect.

Option C: 'VPN routes with the target:65512:1 and target:65512:2 route targets are imported.'

The vrf-target target:65512:1; statement only controls importing routes.

The import policy does not include target:65512:2, so routes tagged with target:65512:2 alone would not be imported into this VRF.

This is incorrect.

Option D: 'VPN routes are exported with only the target:65512:1 route target.'

The export policy (vpn-a-export) clearly adds both 65512:1 and 65512:2.

This is incorrect.

Final Answer:

A. VPN routes are exported with the target:65512:1 and target:65512:2 route targets.

Verification from Juniper Documentation

Juniper MPLS L3VPN Configuration Guide confirms that vrf-target is used for importing, while vrf-export can be used for exporting multiple route targets.

Juniper Routing Policy Documentation states that export policies can add multiple BGP communities (route targets).

RFC 4364 (BGP/MPLS IP VPNs) defines the use of route targets for VPN route control.

Interprovider Option C for Layer 3 VPNs involves the use of Autonomous System Boundary Routers (ASBRs) to exchange labeled VPN-IPv4 routes between different Autonomous Systems (AS). This option requires BGP sessions between ASBRs, and the VPN routes are carried end-to-end using MPLS labels. Here's a detailed analysis of the roles of different routers in this scenario:

1. **ASBR Routers**:

- ASBRs are responsible for exchanging VPN-IPv4 routes between different ASes.

- **A. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.**

- Correct. ASBRs maintain routes to internal destinations within their own AS, and they also need to know the loopback addresses of PEs in the other AS to set up the BGP sessions and MPLS tunnels.

2. **PE Routers**:

- PE routers are responsible for maintaining VPN routes and label information to forward VPN traffic correctly.

- **B. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**

- Correct. PE routers need to maintain:

- Internal routes within their AS for routing.

- Loopback addresses of other AS PEs for establishing MPLS LSPs.

- L3VPN routes to provide end-to-end VPN connectivity.

3. **P Routers**:

- P routers are the core routers that do not participate in BGP VPN routing but forward labeled packets based on MPLS labels.

- **C. P routers only maintain the internal routes from their own AS.**

- Correct. P routers maintain the internal routing information to forward packets within the AS and use MPLS labels for forwarding VPN packets. They do not maintain VPN routes or routes from other ASes.

4. **Incorrect Statements**:

- **D. P routers maintain the internal routes from its own AS and the loopback address from the other AS PEs.**

- Incorrect. P routers do not need to maintain the loopback addresses of other AS PEs. They only maintain internal routing and MPLS label information.

- **E. ASBR routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**

- Incorrect. ASBR routers do not maintain L3VPN routes. They exchange labeled VPN-IPv4 routes with other ASBRs and forward them to PE routers.

**Conclusion**:

The correct answers are:

**A. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.**

**B. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**

**C. P routers only maintain the internal routes from their own AS.**

**Reference**:

- Juniper Networks Documentation on Interprovider VPNs: [Interprovider VPN Configuration](https://www.juniper.net/documentation/en_US/junos/topics/topic-map/mpls-vpn-interprovider.html)

- MPLS and VPN Architectures, CCIP Edition by Ivan Pepelnjak and Jim Guichard

In the provided exhibit, the configuration involves using a RIB (Routing Information Base) group to facilitate internet access for VPN-A Site 1 through PE-1. The goal is to provide VRF Internet access over a single connection.

1. **Understanding RIB Groups**:

- RIB groups allow for the import and export of routes between different routing tables.

- In this scenario, we have two RIBs: `inet.0` (the main routing table) and `VPN-A.inet.0` (the VRF-specific routing table).

2. **Statement Analysis**:

- **A. You must use the RIB group to move a default route, which is learned through BGP, from the inet.0 table to the VPN-A.inet.0 table.**

- Correct. To provide Internet access to VPN-A, the default route (0.0.0.0/0) learned via BGP in the `inet.0` table must be made available in the `VPN-A.inet.0` table. This is done using the RIB group to import the default route.

- **B. You do not need to use the RIB group to move interface routes from the inet.0 table to the VPN-A.inet.0 table.**

- Correct. Interface routes (connected routes) are typically directly added to both the global and the VRF routing tables without needing a RIB group. These routes are known to the VRF because the interfaces are part of the VRF configuration.

- **C. You do not need to use the RIB group default route, which is learned through BGP, from the inet.0 table to the VPN-A.inet.0 table.**

- Incorrect. As discussed, the default route needs to be imported into the VRF's routing table using a RIB group to enable Internet access for the VRF.

- **D. You must use the RIB group to move interface routes from the inet.0 table to the VPN-A.inet.0 table.**

- Incorrect. Interface routes are directly associated with the VRF interfaces and are automatically known to the VRF routing table. There is no need to use a RIB group for these routes.

**Conclusion**:

The correct answers are:

**A. You must use the RIB group to move a default route, which is learned through BGP, from the inet.0 table to the VPN-A.inet.0 table.**

**B. You do not need to use the RIB group to move interface routes from the inet.0 table to the VPN-A.inet.0 table.**

**Reference**:

- Juniper Networks Documentation on RIB Groups: [RIB Groups Overview](https://www.juniper.net/documentation/en_US/junos/topics/concept/rib-groups-overview.html)

- Junos OS VPNs Configuration Guide: [Junos VPNs Configuration](https://www.juniper.net/documentation/en_US/junos/topics/concept/vpns-overview.html)

Intermediate System to Intermediate System (IS-IS) is a link-state routing protocol used to move information efficiently within a computer network. It uses a series of Protocol Data Units (PDUs) to manage the network's topology and ensure consistency across all routers in the network. Specifically, Link State PDUs (LSPs), Complete Sequence Number PDUs (CSNPs), and Partial Sequence Number PDUs (PSNPs) play crucial roles in this process.

1. **PSNPs (Partial Sequence Number PDUs)**:

- **Acknowledge a received LSP**: PSNPs are used to acknowledge the receipt of LSPs. When a router receives an LSP, it sends a PSNP back to the sender to confirm that the LSP has been received.

- **Request a missing LSP**: PSNPs are also used to request missing LSPs. If a router identifies a missing LSP based on sequence numbers, it can send a PSNP to request the specific LSP from its neighbors.

2. **CSNPs (Complete Sequence Number PDUs)**:

- **Summarize LSPs**: CSNPs are used to summarize all the LSPs known to a router. They are typically sent at regular intervals to provide a complete list of LSPs in a database. They are not used to acknowledge or request specific LSPs but provide an overview of all LSPs for database synchronization.

Based on this understanding, let's evaluate the statements:

- **A. PSNPs are used to acknowledge a received LSP.**

- Correct. PSNPs serve the purpose of acknowledging LSPs received from other routers.

- **B. CSNPs are used to acknowledge a received LSP.**

- Incorrect. CSNPs are not used for acknowledging LSPs; they are used to provide a summary of all LSPs.

- **C. CSNPs are used to request a missing LSP.**

- Incorrect. CSNPs are not used to request missing LSPs; this is the role of PSNPs.

- **D. PSNPs are used to request a missing LSP.**

- Correct. PSNPs are used to request specific missing LSPs when a router detects that it is missing information.

**Conclusion**:

The correct statements about IS-IS are:

**A. PSNPs are used to acknowledge a received LSP.**

**D. PSNPs are used to request a missing LSP.**

**Reference**:

- Juniper Networks Documentation on IS-IS: [IS-IS Overview](https://www.juniper.net/documentation/en_US/junos/topics/concept/is-is-routing-overview.html)

- RFC 1195, Use of OSI IS-IS for Routing in TCP/IP and Dual Environments: [RFC 1195](https://tools.ietf.org/html/rfc1195) which details the operation and use of IS-IS, including the roles of PSNPs and CSNPs.