300-420 Question 131
Single answerA large enterprise is designing a network to support multiple departments, each requiring traffic isolation for security and performance. The network must support overlapping IP address spaces between departments. Which design feature would best meet these requirements?
- A
Implement Virtual Routing and Forwarding (VRF) instances on the routers
- B
Deploy VLANs with ACLs for traffic isolation
- C
Utilize BGP with route filtering to separate departmental traffic
- D
Configure static NAT for overlapping IP address resolution
Show answer and explanation
Correct answer: A
Explanation
VRFs are the optimal solution for this scenario because they allow the enterprise to isolate traffic between departments and enable the use of overlapping IP address spaces. By maintaining separate routing tables for each VRF instance, the network achieves both the necessary security and operational flexibility.
- A. Correct.
Virtual Routing and Forwarding (VRFs) are specifically designed to provide traffic isolation and allow overlapping IP address spaces by maintaining separate routing tables for each department.
- B. Incorrect.
While VLANs can provide traffic isolation at Layer 2, they do not inherently solve the issue of overlapping IP address spaces. Additional configurations like VRFs or NAT would be required.
- C. Incorrect.
BGP with route filtering is useful for controlling routing advertisements and traffic policies but does not offer built-in support for overlapping IP address spaces or comprehensive traffic isolation.
- D. Incorrect.
Static NAT can resolve IP address conflicts but does not inherently provide traffic isolation or scalability for a large enterprise with multiple departments.