300-415 Question 144
Single answerYou are configuring a Cisco SD-WAN fabric for high availability at a branch site. The branch has two edge devices connected to the same LAN segment, and you want to ensure seamless failover for LAN traffic in case one edge device fails. You decide to use VRRP for redundancy. During the configuration, what must you ensure for the VRRP implementation to function properly in the SD-WAN environment?
- A
Both edge devices must be configured in the same VRRP group with unique virtual router IDs.
- B
The VRRP virtual IP address must be configured as part of a service-side VPN.
- C
The edge devices must synchronize their VRRP configurations over the control plane.
- D
The VRRP priority on the primary edge device must be higher than on the secondary edge device.
Show answer and explanation
Correct answer: B
Explanation
In Cisco SD-WAN, VRRP is used to provide redundancy for edge devices on the service-side VPN. The virtual IP address configured for VRRP must belong to the service-side VPN to ensure proper routing of LAN traffic through the SD-WAN fabric. Other options, while important for VRRP operation, are either incorrect or do not address the specific requirement for SD-WAN environments.
- A. Incorrect.
Incorrect: While edge devices must belong to the same VRRP group, the virtual router ID is not required to be unique. Both devices in the same group use the same virtual router ID.
- B. Correct.
Correct: The VRRP virtual IP address must be part of the service-side VPN to ensure proper routing for LAN traffic in Cisco SD-WAN implementations.
- C. Incorrect.
Incorrect: VRRP configurations are not synchronized over the control plane in Cisco SD-WAN; they are locally configured on each device.
- D. Incorrect.
Incorrect: While setting the priority is critical for determining the master router, this step alone does not ensure VRRP functionality in SD-WAN.