300-410 Question 36
Single answerYou are tasked with configuring VRF-Lite on a Cisco router to segment traffic between two departments: HR and IT. Each department requires isolated routing tables. After configuring the VRF instances and assigning interfaces to the respective VRFs, you notice that devices within the HR VRF are unable to ping devices within the IT VRF. What step is necessary to enable communication between the two VRFs while maintaining traffic segmentation?
- A
Configure static routes within each VRF pointing to the other VRF.
- B
Implement route leaking between the HR and IT VRFs using VRF import/export route-targets.
- C
Enable Policy-Based Routing (PBR) on the router to redirect traffic between VRFs.
- D
Assign both interfaces to the same VRF to allow direct communication between them.
Show answer and explanation
Correct answer: B
Explanation
VRF-Lite creates isolated routing tables for each VRF, preventing communication between them by default. To enable communication while maintaining segmentation, route leaking must be implemented using VRF import and export route-targets. This approach allows selected routes to be shared between VRFs without merging their routing tables.
- A. Incorrect.
Static routes alone cannot enable communication between VRFs because VRF instances maintain separate routing tables. Route leaking is required for inter-VRF communication.
- B. Correct.
Route leaking using VRF import/export route-targets is the correct method to enable controlled communication between VRFs while maintaining routing table segmentation.
- C. Incorrect.
Policy-Based Routing (PBR) is used to influence packet forwarding based on policies but is not applicable for enabling communication between VRFs.
- D. Incorrect.
Assigning both interfaces to the same VRF would eliminate the segmentation provided by VRF-Lite, which contradicts the requirement to maintain isolated routing tables.