300-415 Question 172
Select 3A network administrator is tasked with configuring a control policy to influence the OMP routes being advertised from a branch site to the data center. The requirement is to allow only routes from a specific VPN (VPN 10) and deny all other routes. Which of the following steps must the administrator take to successfully implement this policy?
- A
Create a route policy to match the desired VPN and set an action to 'accept'.
- B
Define a control policy and apply it as 'outbound' on the branch site.
- C
Apply the control policy as 'inbound' on the data center's vSmart controller.
- D
Configure a default 'deny' action in the route policy for unmatched routes.
- E
Activate the policy at the branch site using the CLI command 'policy activate'.
Show answer and explanation
Correct answers: A, B, D
Explanation
To configure a control policy that advertises only routes from a specific VPN, the administrator must first create a route policy to match and accept the desired VPN (VPN 10). The control policy must then be defined and applied as 'outbound' on the branch site to influence outbound route advertisements. Additionally, a default 'deny' action should be included to ensure unmatched routes are not advertised. The 'policy activate' CLI command is not applicable in this context since SD-WAN policies are managed through vManage or vSmart.
- A. Correct.
Correct. A route policy is needed to explicitly match the desired VPN (VPN 10) and specify that these routes should be accepted.
- B. Correct.
Correct. A control policy must be created and applied as 'outbound' on the branch site to influence the routes being advertised from the branch.
- C. Incorrect.
Incorrect. Applying the control policy as 'inbound' on the data center's vSmart controller would not influence the routes being advertised from the branch site.
- D. Correct.
Correct. A default 'deny' action is necessary to ensure that all routes not explicitly matched in the route policy are rejected.
- E. Incorrect.
Incorrect. The 'policy activate' command is not used for activating policies in Cisco SD-WAN; policies are activated through vManage or vSmart configuration.