The Enterprise Routing and Switching - Professional (JNCIP-ENT) (JN0-650)

In Junos OS, particularly in BGP-based environments like EVPN-VXLAN or MPLS, the router often needs to perform a recursive lookup to resolve the BGP next-hop of a route.

Next-Hop Resolution (Option C): When an EVPN route (found in default-switch.evpn.0) is received, the protocol next-hop is typically the loopback IP of the remote VTEP. To actually forward traffic, the switch must know how to reach that loopback IP.

The inet.3 table is the default table in Junos used to store egress interface information for BGP next-hops.

While inet.0 handles standard unicast routing, inet.3 is specifically consulted for resolving the path toward BGP peers. In an EVPN context, this ensures that the VXLAN tunnel endpoint is reachable and properly resolved through the underlay.

Other Tables: * inet.2 (Option A) is used for Multicast RPF checks.

default-switch.evpn.0 (Option B) stores the EVPN routes themselves (MAC/IP), but it is the source of the lookup, not the table where the recursive resolution occurs.

vxlan.inet (Option D) is an internal table used to track active VXLAN tunnels but is not the primary table for recursive BGP next-hop validation.

In an EVPN-VXLAN Edge-Routed Bridging (ERB) architecture, also known as a collapsed fabric, the Layer 3 default gateway functionality is moved from the core/spine layer down to the edge (the leaf or distribution layer).

Anycast Gateways: To support seamless host mobility and redundancy, multiple distribution/leaf switches are configured with the same anycast IP address and MAC address on their IRB interfaces for a given VLAN. This allows a host to move between different switches without needing to update its default gateway configuration or ARP cache.

Distributed Routing: Routing occurs locally at the edge (distribution layer). Traffic destined for a different subnet is routed by the first switch it hits (the ingress leaf), rather than being backhauled to a central core router.

Symmetric vs. Asymmetric IRB: Junos OS 24.4 supports both models, but the ERB design typically utilizes symmetric routing for better scalability, where each leaf only needs to know the routes for its locally connected VNIs and uses a transit VNI for inter-subnet communication.

Option A is incorrect because while unique IPs can be used (Method 1 in some docs), the defining characteristic of an efficient ERB design is the use of shared Anycast IPs for the gateway. Option C describes a Centrally-Routed Bridging (CRB) design, not ERB.

To simplify VLAN management and automate the creation and pruning of VLANs across a network, Juniper utilizes the Multiple VLAN Registration Protocol (MVRP).

MVRP on Trunk Interfaces (Option C): MVRP is the IEEE 802.1ak standard that replaces the older, proprietary GVRP. It is designed to run on trunk interfaces between switches.

Dynamic Creation: When a VLAN is added to one switch, MVRP advertises its existence to neighboring switches. If those switches need to reach that VLAN, they can dynamically create it in their database.

Pruning: If a switch no longer has any active ports or downstream neighbors interested in a specific VLAN, it stops advertising that VLAN on its trunks. This " prunes " the VLAN traffic from those links, saving bandwidth.

Incorrect Options: Option A and B are incorrect because GVRP is legacy and no longer the recommended protocol for modern Junos deployments. Option D is incorrect because MVRP is meant for inter-switch trunk links to manage the fabric, not for edge access ports where VLAN membership is usually static.

VSTP (VLAN Spanning Tree Protocol) is Juniper ' s implementation that provides a separate spanning tree instance for each VLAN, ensuring compatibility with Cisco ' s PVST+. However, it has significant scaling limitations:

Instance Limits: On many Juniper EX and QFX series switches, VSTP is restricted to a maximum of 253 or 510 VLAN instances depending on the software version (ELS vs. non-ELS). In your scenario, having 450 VLANs exceeds the standard 253-instance limit found on many platforms.

The Solution (Option B): When the number of VLANs exceeds the VSTP capacity, the recommended best practice is to enable RSTP (Rapid Spanning Tree Protocol). Unlike VSTP, RSTP runs a single spanning tree instance for the entire switch, regardless of how many VLANs are configured. This ensures that all 450 VLANs are protected from loops without hitting the hardware ' s instance-count limit.

Other Options: Option A (force-version) only affects the BPDU format for compatibility but doesn ' t solve the instance limit. Option C and Option D are parameter tuning actions that do not address the architectural limitation of the number of running instances.

In a Juniper Q-in-Q (Layer 2 tunneling) environment, VLAN rewrites (specifically the swap operation) provide the most granular control over how customer traffic (C-VLANs) is mapped to service provider traffic (S-VLANs).

VLAN Rewrites (The Swap Operation): This method involves replacing the incoming customer VLAN tag with a service provider tag as the frame enters the tunnel. This is technically a " swap " because the original C-VLAN tag is removed and the S-VLAN tag is written in its place. At the egress of the tunnel, the S-VLAN tag is swapped back for the original C-VLAN tag. This is often used when different customers use the same C-VLAN IDs and the provider needs to keep them unique within their core.

Many-to-Many: This is a mapping style where multiple customer VLANs are mapped to multiple service provider VLANs, but it typically relies on the " push " (stacking) operation rather than a literal " swap " of the tag itself.

All-in-One: This is the simplest form of Q-in-Q where all traffic entering an interface is " pushed " into a single S-VLAN tag, regardless of any existing C-VLAN tags. No swapping occurs; the original tags are simply buried under the new provider tag.

L2PT (Layer 2 Protocol Tunneling): This is a feature used to tunnel Layer 2 control protocols (like STP, CDP, or LLDP) across a provider network by encapsulating them or changing their destination MAC addresses. It does not involve the swapping of VLAN tags.

The exhibit shows a BGP Route Reflector (RR) configuration where an export policy named NHS (Next-Hop Self) is applied to the internal BGP group int-group. The policy NHS sets the next-hop self attribute for BGP routes.

The Problem (Traffic Tromboning): In a standard BGP Route Reflector design, the RR should reflect routes without modifying the BGP next-hop attribute. By applying a next-hop self policy on the export to clients, the RR tells all its clients that it is the exit point for those routes. Consequently, all data plane traffic is sent to the RR first before being forwarded to the actual destination, rather than following the optimal direct path between clients. This is known as " traffic tromboning " or suboptimal routing.

The Solution (Option C): The most direct way to fix this is to delete the export policy that is forcing the next-hop to be the RR. By deleting protocols bgp group int-group export NHS, the RR will resume standard behavior and reflect the original next-hop received from the route source, allowing clients to route traffic directly to the correct destination.

The Refined Solution (Option D): If you must keep the NHS policy (perhaps for routes learned from external peers), you should ensure it only applies to those specific routes. By adding from route-type internal to the policy term and then potentially changing the logic (or simply narrowing the scope), you can prevent the RR from incorrectly applying next-hop self to internal routes that it is merely reflecting. In the context of this specific problem, Option D combined with a change in the policy ' s action or scope helps ensure reflected internal routes maintain their original, optimal next-hops.

Option A is incorrect because setting next-hop self for external routes is common practice, but it doesn ' t solve the problem of internal reflected routes being diverted to the RR.

Option B is incorrect because applying this as an import policy would change how the RR itself sees the routes, but it wouldn ' t fix the attributes being sent out to the clients in the reflection process.

OSPF determines the best path to a destination by calculating the metric (cost) of each link. By default, Junos OS uses a reference bandwidth of 100 Mbps to calculate this cost using the formula:

When the reference bandwidth is left at the default 100 Mbps, any interface with a speed of 100 Mbps or higher (including 1 GbE and 10 GbE) is assigned a cost of 1 because the minimum OSPF cost is 1. This results in equal-cost paths, preventing the router from preferring the faster 10 GbE link.

To ensure 10 GbE interfaces are preferred, you must create a cost differential:

Option A (Reference Bandwidth): By increasing the reference bandwidth to 10G (or higher), the calculation changes. For a 10 GbE link, the cost becomes $10,000 / 10,000 = 1$. For a 1 GbE link, the cost becomes $10,000 / 1,000 = 10$. Since OSPF prefers the path with the lowest cumulative cost, the 10 GbE link is now preferred.

Option D (Manual Metric): You can manually override the automatic cost calculation by assigning a higher metric specifically to the 1 GbE interfaces. If a 1 GbE interface is manually set to a cost of 50 and the 10 GbE interface remains at 1 (or is set to a lower value), the router will prioritize the 10 GbE path.

Option B is incorrect because a higher metric makes a path less preferred. Option C is incorrect because a 1G reference bandwidth would still result in both 1 GbE and 10 GbE interfaces having a cost of 1.

The exhibit illustrates a PIM multicast environment where router R2 has received a multicast packet from Source 1 (192.168.100.10) on its ge-0/0/4.0 interface. To prevent loops, PIM-SM uses a mechanism called Reverse Path Forwarding (RPF).

RPF Check Process (Option A): When a multicast packet arrives, the router performs an RPF check by looking up the source ' s IP address in its unicast routing table (typically inet.0).

The exhibit ' s command output, show multicast rpf 192.168.100.10, explicitly shows that for the source network $192.168.100.0/24$, the RPF interface is ge-0/0/1.0.

Because the packet actually arrived on ge-0/0/4.0 instead of the expected ge-0/0/1.0 interface, the RPF check fails.

Packet Discard (Option C): According to standard PIM-SM operation in Junos OS 24.4, if a multicast packet fails the RPF check—meaning it arrived on an interface that the router does not use to reach the source via unicast—the packet is discarded. This is a fundamental loop-prevention mechanism that ensures multicast traffic is only accepted from the shortest path toward the source.

Option B is incorrect because the router will not add any interfaces to the Outgoing Interface List (OIL) for a packet that fails the initial RPF check.

Option D is incorrect because the exhibit clearly shows the interface in the RPF table (ge-0/0/1.0) is different from the interface where the packet was received (ge-0/0/4.0).

In Junos OS Class of Service (CoS), schedulers are the fundamental components used to manage the resources of individual egress queues. They determine how the switch handles traffic for a specific forwarding class as it waits to exit an interface.

Buffer Size (Option A): A scheduler defines the buffer size (memory allocation) for its assigned queue. This buffer holds packets during periods of congestion to prevent immediate packet loss. The size can be configured as a specific percentage of the total interface buffer, a temporal value in microseconds, or using the " remainder " of available space.

Queue Priority (Option D): A scheduler identifies the priority of the queue. Junos supports multiple priority levels, such as low , medium-low , medium-high , and high . This setting dictates the order in which the transmission hardware services the queues; for example, high-priority queues are typically emptied before low-priority ones.

Why other options are incorrect: Interface rate-limiting (Option B) is typically managed at the interface level or through policers , not the scheduler itself, which focuses on queue-specific transmission rates. DiffServ code translation (Option C) is the responsibility of rewrite rules , which modify the packet header markings as they leave the switch.