D is correct. Keywords: MPLS design attribute via separate dedicated VPN.
A is wrong because Service Provider will not allow the internet gateway router (CE) connecting to their MPLS backbone for security reason. Also not practical and will complicate Service Provider service construct.
B is wrong because you don't need the full BGP routing table and VRF lite to have internet access.
C is wrong for same reason as B, that you don't need full internet routing table to be able to access internet.
D is correct, simple and straightforward, making use of mpls vrf/vpn route targets
Option A is incorrect because connecting the Internet gateway router as a PE router to the MPLS backbone is not directly related to providing Internet access through a dedicated VPN.
Option B is unrelated to providing Internet access through a dedicated VPN. VRF-Lite and the full BGP routing table support are relevant for separate VPN instances and routing within the customer network, but not specifically for providing Internet access.
Option C is also incorrect. Inserting the full Internet BGP routing table into the Internet access VPN is not a common approach for providing Internet access to a specific customer through a dedicated VPN. It would result in unnecessary overhead and potential routing conflicts.
Therefore, the correct option is D, where assigning the customer to the same RTs as the Internet gateway ensures that the customer's traffic receives the appropriate Internet access service.
It's A
Check the question 64
Egress PE NAT is being used via a single centralized router to provide Internet access to L3VPN customers.
Which description of the NAT operation is true?
Option A is incorrect because connecting the Internet gateway router as a PE router to the MPLS backbone is not directly related to providing Internet access through a dedicated VPN.
Option B is unrelated to providing Internet access through a dedicated VPN. VRF-Lite and the full BGP routing table support are relevant for separate VPN instances and routing within the customer network, but not specifically for providing Internet access.
Option C is also incorrect. Inserting the full Internet BGP routing table into the Internet access VPN is not a common approach for providing Internet access to a specific customer through a dedicated VPN. It would result in unnecessary overhead and potential routing conflicts.
Therefore, the correct option is D, where assigning the customer to the same RTs as the Internet gateway ensures that the customer's traffic receives the appropriate Internet access service.
D - I changed my mind after checking the link below where we see on the PE they have configured
"Import VPN route-target communities
RT:1:10 RT:100:100 -- to receive Internet VRF default route"
Which uses the same RT as on the "GW PE"
https://community.cisco.com/t5/service-providers-knowledge-base/providing-internet-access-for-mpls-l3-vpns/ta-p/3109924
"Internet gateway acts as a CE router and holds the full BGP routing table. Only the subset of routes and the default route are advertised to clients assigned to Internet VPN."
"On the PE gateway router, a new VRF instance for Internet is used. The interface facingthe Internet gateway is assigned to the Internet VRF
"
Even if is not best practice, option C loks like the only valid answer since "internet gateway" is not a PE.
Internet Access using a separate VRF for internet service
https://community.cisco.com/t5/service-providers-knowledge-base/providing-internet-access-for-mpls-l3-vpns/ta-p/3109924
It's A
This section is not available anymore. Please use the main Exam Page.350-501 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
chelgeorge
Highly Voted 8 months, 3 weeks agoxChdjdufurpew
5 months agochst
8 months, 1 week agoxChdjdufurpew
Most Recent 5 months agothejag
8 months, 3 weeks agothejag
8 months agocname404
11 months agochst
11 months, 3 weeks agochst
8 months, 1 week agoCprest
1 year, 11 months agodhikra
2 years, 2 months ago