300-440 Question 37
Single answerYou are tasked with segmenting traffic for two different departments, HR and Finance, on a single router using VRF-Lite. The router's interfaces connected to the HR and Finance networks are GigabitEthernet0/1 and GigabitEthernet0/2, respectively. After configuring VRF instances 'HR_VRF' and 'Finance_VRF', what additional step is necessary to ensure the router properly segregates traffic for these departments?
- A
Assign the 'ip vrf forwarding' command under the respective interfaces.
- B
Apply access control lists (ACLs) to filter HR and Finance traffic.
- C
Enable BGP and configure route-targets for VRF instances.
- D
Configure static routes for HR and Finance traffic in the global routing table.
Show answer and explanation
Correct answer: A
Explanation
In VRF-Lite, after creating VRF instances and associating them with routing tables, the 'ip vrf forwarding' command must be applied under the interfaces connected to the respective networks. This step ensures that traffic on these interfaces is processed using the correct VRF routing table, effectively isolating traffic for different departments. Other options, such as ACLs or BGP configurations, are either irrelevant or unnecessary for basic VRF-Lite functionality.
- A. Correct.
Correct. The 'ip vrf forwarding' command binds an interface to a specific VRF instance, ensuring traffic on that interface is associated with the correct VRF routing table.
- B. Incorrect.
Incorrect. While ACLs can be used for traffic filtering, they are not required for basic VRF-Lite configuration or traffic segregation.
- C. Incorrect.
Incorrect. BGP and route-target configurations are used in MPLS-based VRF implementations, not VRF-Lite, which operates without MPLS.
- D. Incorrect.
Incorrect. Static routes in the global routing table are not related to configuring VRF-Lite and would not ensure traffic segregation for HR and Finance.