Juniper JN0-683 Data Center Professional (JNCIP-DC) Exam Online Training

Question #1

Exhibit.

A VXLAN tunnel has been created between leaf1 and Ieaf2 in your data center.

Referring to the exhibit, which statement is correct?

A . Traffic sent from server1 to server2 will be dropped on Ieaf2.
B . Traffic sent from server1 to server2 will be tagged with VLAN ID 100 on Ieaf2 and forwarded to server2.
C . Traffic sent from server1 to server2 will be tagged with VLAN ID 200 on Ieaf2 and forwarded to server2.
D . Traffic sent from server1 to server2 will be dropped on leaf1.

Reveal Solution Hide Solution

Correct Answer: C
C

Explanation:

Understanding VXLAN Tunneling:

VXLAN (Virtual Extensible LAN) is a network virtualization technology that addresses the scalability issues associated with traditional VLANs. VXLAN encapsulates Ethernet frames in UDP, allowing Layer 2 connectivity to extend across Layer 3 networks.

Each VXLAN network is identified by a unique VXLAN Network Identifier (VNI). In this exhibit, we have two VNIs, 5100 and 5200, assigned to the VXLAN tunnels between leaf1 and leaf2.

Network Setup Details:

Leaf1: Connected to Server1 with VLAN ID 100 and associated with VNI 5100.

Leaf2: Connected to Server2 with VLAN ID 200 and associated with VNI 5200.

Spine: Acts as the interconnect between leaf switches.

Traffic Flow Analysis:

When traffic is sent from Server1 to Server2, it is initially tagged with VLAN ID 100 on leaf1.

The traffic is encapsulated into a VXLAN packet with VNI 5100 on leaf1.

The packet is then sent across the network (via the spine) to leaf2.

On leaf2, the VXLAN header is removed, and the original Ethernet frame is decapsulated. Leaf2 will then associate this traffic with VLAN ID 200 before forwarding it to Server2.

Correct Interpretation of the Exhibit:

The traffic originating from Server1, which is tagged with VLAN ID 100, will be encapsulated into VXLAN and transmitted to leaf2.

Upon arrival at leaf2, it will be decapsulated, and since it is associated with VNI 5200 on leaf2, the traffic will be retagged with VLAN ID 200.

Therefore, the traffic will reach Server2 tagged with VLAN ID 200, which matches the network

configuration shown in the exhibit.

Data Center

Reference: This configuration is typical in data centers using VXLAN for network virtualization. It allows isolated Layer 2 segments (VLANs) to be stretched across Layer 3 boundaries while maintaining distinct VLAN IDs at each site.

This approach is efficient for scaling large data center networks while avoiding VLAN ID exhaustion and enabling easier segmentation.

In summary, the correct behavior, as per the exhibit and the detailed explanation, is that traffic sent from Server1 will be tagged with VLAN ID 200 when it reaches Server2 via leaf2. This ensures proper traffic segmentation and handling across the VXLAN-enabled data center network.

Question #2

Exhibit.

You have implemented an EVPN-VXLAN data center. Device served must be able to communicate with device server2.

Referring to the exhibit, which two statements are correct? (Choose two.)

A . An IRB interface must be configured on spinel and spine2.
B . Traffic from server1 to server2 will transit a VXLAN tunnel to spinel or spine2. then a VXLAN tunnel from spinel or spine2 to Ieaf2.
C . An IRB Interface must be configured on leaf1 and Ieaf2.
D . Traffic from server! to server2 will transit the VXLAN tunnel between leaf1 and Ieaf2.

Reveal Solution Hide Solution

Correct Answer: CD
CD

Explanation:

Understanding the Exhibit Setup:

The network diagram shows an EVPN-VXLAN setup, a common design for modern data centers enabling Layer 2 and Layer 3 services over an IP fabric.

Leaf1 and Leaf2 are the leaf switches connected to Server1 and Server2, respectively, with each server in a different subnet (172.16.1.0/24 and 172.16.2.0/24).

Spine1 and Spine2 are part of the IP fabric, interconnecting the leaf switches.

EVPN-VXLAN Basics:

EVPN (Ethernet VPN) provides Layer 2 and Layer 3 VPN services using MP-BGP.

VXLAN (Virtual Extensible LAN) encapsulates Layer 2 frames into Layer 3 packets for transmission across an IP network.

VTEP (VXLAN Tunnel Endpoint) interfaces on leaf devices handle VXLAN encapsulation and decapsulation.

Integrated Routing and Bridging (IRB):

IRB interfaces are required on leaf1 and leaf2 (where the endpoints are directly connected) to route between different subnets (in this case, between 172.16.1.0/24 and 172.16.2.0/24).

The IRB interfaces provide the necessary L3 gateway functions for inter-subnet communication.

Traffic Flow Analysis:

Traffic from Server1 (172.16.1.1) destined for Server2 (172.16.2.1) must traverse from leaf1 to leaf2.

The traffic will be VXLAN encapsulated on leaf1, sent over the IP fabric, and decapsulated on leaf2.

Since the communication is between different subnets, the IRB interfaces on leaf1 and leaf2 are

crucial for routing the traffic correctly.

Correct Statements:

C. An IRB Interface must be configured on leaf1 and leaf2: This is necessary to perform the inter-subnet routing for traffic between Server1 and Server2.

D. Traffic from server1 to server2 will transit the VXLAN tunnel between leaf1 and leaf2: This describes the correct VXLAN operation where the traffic is encapsulated by leaf1 and decapsulated by leaf2.

Data Center

Reference: In EVPN-VXLAN architectures, the leaf switches often handle both Layer 2 switching and Layer 3 routing via IRB interfaces. This allows for efficient routing within the data center fabric without the need to involve the spine switches for every routing decision.

The described traffic flow aligns with standard EVPN-VXLAN designs, where direct VXLAN tunnels between leaf switches enable seamless and scalable communication across a data center network.

Question #3

Which statement is correct about a collapsed fabric EVPN-VXLAN architecture?

A . Fully meshed back-to-back links are needed between the spine devices.
B . It supports multiple vendors in the fabric as long as all the spine devices are Juniper devices deployed with L2 VTEPs
C . Using Virtual Chassis at the leaf layer increases resiliency.
D . Border gateway functions occur on border leaf devices.

Reveal Solution Hide Solution

Question #4

You are deploying an EVPN-VXLAN overlay. You must ensure that Layer 3 routing happens on the spine devices.

In this scenario, which deployment architecture should you use?

A . ERB
B . CRB
C . bridged overlay
D . distributed symmetric routing

Reveal Solution Hide Solution

Question #5

You want to ensure that VXLAN traffic from the xe-0/0/12 interlace is being encapsulated by logical vlep.32770 and sent to a remote leaf device in this scenario, which command would you use to verify that traffic is flowing?

A . monitor traffic interface xe-0/0/12
B . show interface terse vtep.32770
C . show interfaces terse vtep.32770 statistics
D . show interfaces vtep.32770 detail

Reveal Solution Hide Solution

Question #6

Exhibit.

Connections between hosts connected to Leaf-1 and Leaf-2 are not working correctly.

A . Referring to the exhibit, which two configuration changes are required to solve the problem? (Choose two.)
B . Configure the set switch-options vtep-source-interface irb.0 parameter on Leaf-1.
C . Configure the set switch-options vrf-target target:65000:l parameteron Leaf-2.
D . Configure the set switch-options route-distinguisher i92.168.100.50:i parameter on Leaf-1.
E . Configure the set switch-options service-id 1 parameter on Leaf-2.

Reveal Solution Hide Solution

Question #7

What are three actions available tor MAC move limiting? (Choose three.)

A . drop
B . filter
C . enable
D . log
E . shutdown

Reveal Solution Hide Solution

Question #8

Exhibit.

Referring to the exhibit, the spinel device has an underlay BGP group that is configured to peer with its neighbors’ directly connected interfaces.

Which two statements are true in this scenario? (Choose two.)

A . The multihop statement is not required to establish the underlay BGP sessions.
B . Load balancing for the underlay is not configured correctly.
C . The multihop statement is required to establish the underlay BGP sessions.
D . Load balancing for the underlay is configured correctly.

Reveal Solution Hide Solution

Question #9

You want to provide a OCI that keeps each data center routing domain isolated, while also supporting translation of VNIs.

Which DCI scheme allows these features?

A . MPLS DCI label exchange
B . over the top (OTT) with VNI translation enabled
C . VXLAN stitching
D . over the top (OTT) with proxy gateways

Reveal Solution Hide Solution

Question #10

Exhibit.

Given the configuration shown in the exhibit, why has the next hop remained the same for the EVPN routes advertised to the peer 203.0.113.2?

A . EVPN routes cannot have the next hop changed.
B . The export policy is incorrectly configured.
C . The vrf-export parameter must be applied.
D . The vpn-apply-export parameter must be applied to this peer.

Reveal Solution Hide Solution

Juniper JN0-683 Data Center Professional (JNCIP-DC) Exam Online Training