300-415 Question 186
Single answerAn enterprise is deploying Cisco SD-WAN to segment traffic between different departments (e.g., HR, Finance, and IT) while ensuring traffic isolation. The engineer has configured multiple VPNs to achieve this. However, employees in the HR department report they cannot access a shared file server in the Finance department, which is located in another VPN. What must be configured to allow controlled communication between these specific VPNs while maintaining segmentation?
- A
Configure route leaking between the HR and Finance VPNs.
- B
Enable BGP peering between the HR and Finance VPNs.
- C
Deploy a shared service VPN for the file server.
- D
Enable multicast routing between the HR and Finance VPNs.
Show answer and explanation
Correct answer: A
Explanation
VPN segmentation in Cisco SD-WAN ensures traffic isolation between different VPNs. However, controlled communication between VPNs can be achieved using route leaking, which selectively shares routes between VPNs. This approach ensures that only specific traffic is allowed while maintaining the segmentation of other traffic.
- A. Correct.
Correct. Route leaking allows specific routes from one VPN to be shared with another, enabling controlled communication between the HR and Finance VPNs while maintaining overall segmentation.
- B. Incorrect.
Incorrect. BGP peering is not directly related to inter-VPN communication in Cisco SD-WAN and does not solve the issue of traffic segmentation.
- C. Incorrect.
Incorrect. A shared service VPN is used for centralized services like DNS or Active Directory, not for inter-VPN communication between specific departments.
- D. Incorrect.
Incorrect. Multicast routing is used for distributing multicast traffic, not for enabling communication between isolated VPNs.