4A0-D03 Nokia SR Linux EVPN and Data Center Interconnect Questions and Answers

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

The exhibit describes an EVPN IRB environment where MAC-VRF100 and IP-VRF-100 exchange host reachability through local learning and EVPN advertisements. Leaf-1 can advertise EVPN route type 2 updates containing host MAC/IP information for MAC-VRF100. This is the normal mechanism used to distribute endpoint bindings learned from local hosts. If IP-VRF-100 is not configured for prefix advertisement, Leaf-1 will not generate EVPN route type 5 updates for that IP-VRF, so option A is consistent. The ARP cache in the IP-VRF is normally required for local subnet host resolution; remote host reachability can be learned through EVPN rather than requiring every remote ARP entry to be learned by local data-plane ARP. Option B is false because ARP/GARP snooping is not performed by the IRB interface in the manner stated. ARP/GARP learning for proxy ARP and MAC/IP advertisement is associated with the MAC-VRF bridge-domain behavior and the local access side, not with the IRB subinterface indiscriminately snooping all ARP/GARP messages as described. Reference: EVPN IRB operation, RT-2 host MAC/IP advertisement, RT-5 behavior, ARP/GARP learning scope.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In an integrated gateway-based DCI design, the same physical or logical router performs both the data center gateway role and the WAN PE role. This is why option D is correct. The device terminates or participates in the data center-side EVPN service and also handles the WAN-side VPN transport, including route translation or re-advertisement where needed. This approach avoids exposing every data center leaf router to the WAN and avoids requiring route reflector reachability between data centers. It also avoids building VXLAN tunnels directly between all leaf routers in separate data centers. Those characteristics belong to gateway-less DCI, where the EVPN overlay stretches more directly across the WAN and the WAN must carry the underlay or overlay reachability required by the data center leaves. Integrated gateway design is more controlled: the gateway is the interworking point, which makes it suitable when the provider or operator wants a strong service boundary and centralized DCI policy enforcement. Reference: integrated gateway-based DCI, single-router gateway/WAN PE function, EVPN/VPN interworking.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

Designated Forwarder election determines which PE forwards BUM traffic from the EVPN overlay toward a multi-homed Ethernet Segment for a given service. In this scenario, all leaf routers share the same DF candidate list for mac-vrf103, but the election configuration is not identical. Leaf1 and Leaf2 use the default algorithm, while Leaf3 and Leaf4 use the preference-based algorithm. Under preference-based DF election, the candidate with the highest configured preference is selected over lower-preference candidates, assuming the candidate list is valid and consistent. The question states that Leaf3 has the higher preference value compared with Leaf4. Therefore, Leaf3 becomes the DF for mac-vrf103. This is the correct outcome because the preference-based election explicitly overrides simple default behavior by assigning operator-defined priority to a PE. In production designs, this is useful when the operator wants deterministic forwarding placement, maintenance control, or service-specific primary-path selection rather than relying only on the default modulo-based DF selection process. Reference: EVPN DF election, preference-based algorithm, MAC-VRF service forwarding.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

For Layer 2 data center interconnect using an integrated gateway, VPLS 100 on the Nokia 7750 SR represents the WAN-side Layer 2 VPN service. The VPLS requires an EVI because EVPN uses the EVI to identify the L2 service instance in the control plane. It also requires BGP EVPN signaling with the appropriate route targets so the local and remote service instances can import the correct EVPN routes. Because the service is transported across the WAN, the BGP/EVPN instance must be associated with the MPLS transport tunnels toward the remote gateway, dcgw20. A VXLAN instance with a VNI is not configured in the 7750 SR VPLS 100 for this integrated WAN gateway service. The VXLAN/VNI mapping is used inside the SR Linux data center fabric where MAC-VRF services are transported over VXLAN. On the WAN side, the VPLS service is carried using MPLS/EVPN mechanisms, not a VXLAN VNI configured directly under the VPLS. Reference: integrated gateway DCI, L2 EVPN/VPLS interworking, EVI and route-target operation.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

Ethernet Auto-Discovery per EVI routes are EVPN route type 1 advertisements used in multi-homing at the service-instance level. A PE sends an AD per EVI route for each MAC-VRF associated with the Ethernet Segment. These routes allow remote PEs to understand that the advertising PE has reachability to a given EVI through the shared ES. They are also used for aliasing and fast convergence, because a remote PE can treat multiple attached PEs as valid paths for traffic toward the same multihomed segment. In VXLAN EVPN, the update can include data-plane information such as the VNI, and it carries route-target information so the route is imported into the correct MAC-VRF. Option B is false because the multi-homing type or redundancy mode is not carried in the AD per EVI update as stated. Redundancy behavior is associated with Ethernet Segment-level signaling and configuration, especially ES discovery and related route attributes, not with AD per EVI as the mechanism that declares the multi-homing type. Reference: EVPN RT-1 AD per EVI, MAC-VRF association, route target, VNI, aliasing.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

PE-CE routing is the mechanism used to exchange customer prefix reachability between a provider edge or data center leaf and the attached customer edge router. It can be implemented statically or dynamically. Static routing is operationally simple but does not scale well when many prefixes or frequent changes are involved. BGP is preferred for larger deployments because it supports policy, route filtering, attributes, and automated advertisement of changing reachability. In most EVPN PE-CE designs, eBGP is preferred because it creates a clean routing boundary between the PE and CE, with each device operating in a different autonomous system. Option D is false because the CE does not advertise BGP EVPN route type 5 updates to the PE. The CE advertises ordinary IPv4 or IPv6 unicast prefixes over the PE-CE routing session. The PE then imports those customer prefixes into the IP-VRF and advertises them into the EVPN overlay as route type 5 IP Prefix routes toward other PEs. This distinction matters: EVPN signaling is a PE-to-PE overlay function, not a CE-originated EVPN control-plane role. Reference: PE-CE routing, eBGP, EVPN RT-5 prefix advertisement.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

A route distinguisher is used in MP-BGP VPN and EVPN address families to make otherwise overlapping tenant routes unique in the BGP control plane. In EVPN, different tenants or EVPN instances may legitimately use the same MAC or IP values. The route distinguisher makes the NLRI globally unique by prepending a unique value to the tenant route. It is typically unique per PE and per EVI, and it is carried in EVPN route advertisements. However, the route distinguisher does not control route import, export, or service membership. That role belongs to the route target, which is a BGP extended community used by receiving PEs to decide which EVPN instance should import the route. Therefore, option D is not part of the correct description of a route distinguisher. Saying that the RD identifies the EVPN instance in the control plane confuses RD uniqueness with route-target membership. The RD makes routes unique; the route target associates those routes with the appropriate MAC-VRF or IP-VRF import policy. Reference: EVPN route distinguisher, overlapping tenant addresses, route target separation.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

For Layer 2 all-active EVPN multi-homing on SR Linux, the Ethernet Segment configuration is the control-plane anchor that binds the redundant access attachment to EVPN. The relevant LAG subinterfaces must be associated with the Ethernet Segment so that the PE can advertise the segment correctly and apply split-horizon and aliasing behavior. The Ethernet Segment must also be administratively enabled; otherwise, the PE will not participate properly in ES discovery and DF procedures. The multi-homing mode must be set to all-active to permit forwarding through multiple attached leaf routers and support host-side LAG operation. The false statement is option B. The Ethernet Segment Identifier has a defined structure, and the blanket statement that the 2nd through 7th octets “must not be all zeros” is not a valid requirement as stated. What matters operationally is that the ESI uniquely identifies the same multi-homed Ethernet Segment across participating PEs and is consistently configured where required. The ESI must be non-zero as a meaningful segment identifier, but the specific octet restriction in the option is not the SR Linux all-active configuration rule. Reference: SR Linux L2 EVPN all-active multi-homing, Ethernet Segment configuration, LAG association.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

This setup represents a Layer 2 EVPN multi-homing attachment where the host is connected to Leaf1 and Leaf2 through an Ethernet Segment named ES-1. In SR Linux EVPN multi-homing, the Ethernet Segment must be associated with the physical or logical attachment interfaces facing the host. This allows the PEs to advertise Ethernet Segment information into EVPN, participate in DF election, and apply the appropriate forwarding behavior for single-active or all-active redundancy. Option D is therefore correct. Option A is not necessarily true because the exhibit indicates an active/standby style attachment, not all-active operation. Option B is also incorrect because ECMP on the remote MAC-VRF is not the mechanism that defines the local ES association or single-active behavior. Option C is wrong in this setup because a host LAG is required for common all-active L2 multi-homing with LACP, but the shown design uses an active/standby-style attachment where the Ethernet Segment is bound to the host-facing ports. The technical anchor is that ES-1 must be associated to the access ports connecting the host into the multi-homed MAC-VRF service. Reference: L2 EVPN multi-homing, Ethernet Segment interface association, DF behavior.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

VXLAN provides a Layer 2 overlay over a Layer 3 underlay by encapsulating Ethernet frames in UDP/IP. This allows tenant bridge domains to span a routed IP fabric without requiring the underlay itself to behave like one large Layer 2 network. VXLAN uses a 24-bit VXLAN Network Identifier, which supports approximately 16 million logical overlays, far exceeding the scale of traditional 12-bit VLAN IDs. Because the VXLAN underlay is IP-routed, traffic can benefit from ECMP across equal-cost paths, improving fabric utilization and resiliency. The false statement is B. VXLAN was not originally developed specifically to support EVPN. VXLAN began as a data-plane overlay encapsulation technology, while EVPN later became the preferred control plane for distributing MAC, MAC/IP, multicast, and prefix reachability in VXLAN-based fabrics. In modern data center design, EVPN and VXLAN are commonly paired: VXLAN supplies the encapsulation and VNI-based segmentation, while EVPN supplies scalable control-plane learning and signaling. Reference: VXLAN data plane, EVPN control plane, ECMP underlay, VNI-based tenant isolation.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

A decoupled gateway-based DCI model separates the data center border-leaf function from the WAN PE function. This separation is the key design point. The border leaf remains part of the data center EVPN/VXLAN environment, while the WAN PE participates in WAN VPN transport and policy enforcement. Because the roles are split across two devices, the handoff between the border leaf and WAN PE provides a clean administrative and operational boundary. That boundary is useful for security policy, QoS marking, traffic classification, and troubleshooting ownership. The WAN does not need direct reachability to every leaf and route reflector as in a gateway-less model. The WAN PE also does not peer directly with the data center route reflector in a decoupled model; route exchange occurs through the border-leaf/WAN-PE handoff. VXLAN tunnels between leaf routers across different data centers are characteristic of gateway-less extension, not decoupled gateway operation. Therefore, the statement about clear demarcation between the data center border leaf and WAN PE is the accurate description. Reference: decoupled gateway-based DCI, security/QoS demarcation, WAN PE separation.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In active-standby, or single-active, Layer 2 EVPN multi-homing, only one PE is active for the Ethernet Segment and MAC-VRF at a time. Leaf1 and Leaf2 participate in DF election, and the elected DF becomes the active forwarding PE for that service attachment. Because this is not all-active multi-homing, the non-DF must not forward traffic to the host for the protected service. This prevents duplicate frames, incorrect MAC learning, and loops on the access side. The DF accepts traffic from the host and forwards BUM traffic received from remote PEs toward the host-facing segment. Option D is false because it claims that the non-DF can forward unicast traffic from remote PEs to the host. In single-active operation, remote peers must direct traffic to the active PE, and the standby PE remains ready to take over only after DF state changes. This is the operational distinction from all-active multi-homing, where more than one PE may be used for forwarding depending on the traffic type and aliasing behavior. Reference: single-active L2 EVPN multi-homing, DF role, non-DF forwarding suppression.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

An anycast-gateway IRB allows multiple PEs to present the same default-gateway IP address to hosts in the same subnet. This is the mechanism that enables distributed gateway behavior in EVPN fabrics. The same anycast gateway IP may be configured on equivalent IRB subinterfaces across remote PEs participating in the same IP-VRF, allowing hosts to use the nearest leaf as their default gateway without changing their gateway address. SR Linux also associates gateway MAC information with the IRB, including virtual gateway MAC behavior used inside the MAC-VRF forwarding table. Option C is false because the anycast gateway IP is not treated as a normal unique host route that appears in the IP-VRF route table alongside the subnet prefix. The subnet route is installed for the connected network, but the shared anycast gateway address is a gateway function, not a separately advertised host endpoint that should appear as ordinary routed host reachability. Treating the anycast IP as a regular host route would undermine the distributed gateway model and create ambiguous ownership across PEs. Reference: IRB anycast gateway, MAC-VRF/IP-VRF interconnection, distributed default-gateway operation.

================