The Versa Certified SD-WAN Specialist (VNX300) (VNX301)

The correct answer is A . Versa branch troubleshooting documentation states that the provider organization should have MP-BGP configured for SD-WAN deployments so that notifications for all relevant branch events are delivered to the Versa Director node. This is significant during onboarding because branch lifecycle events, such as branch-connect and branch-disconnect, help Director determine where the branch is in the staging process and whether the next configuration push should occur.

MP-BGP does not replace IKE or IPsec. The branch still establishes IKE/IPsec to the staging server or Controller depending on the staging phase. MP-BGP also has nothing to do with URL filtering category updates. While BGP can be used in LAN or WAN routing designs, the specific issue described here concerns provider-organization SD-WAN control-plane event delivery.

Therefore, if branch lifecycle events are not appearing properly, validating provider-organization MP-BGP configuration is part of the correct troubleshooting workflow, especially in addition to checking data-path and IPsec connectivity.

The correct answer is B . The exhibit shows the OSPF neighbor in the exst state, which means Exchange Start . Versa documentation lists the OSPF neighbor state codes and identifies exst as “exchange start,” followed by exchange, loading, and full. In normal OSPF adjacency formation, neighbors progress through initialization and two-way communication before they negotiate database exchange. If the neighbor becomes stuck in ExStart or Exchange, a common and highly probable cause is an MTU mismatch between the two OSPF peers. During database description packet negotiation, the peers must agree on parameters that allow LSDB exchange; an MTU mismatch can prevent the adjacency from advancing to Full.

Option A is less likely because an area mismatch usually prevents the neighbor relationship from forming correctly rather than leaving it stuck in ExStart. Option C is also incorrect because the neighbor has already progressed beyond early states, which indicates that bidirectional communication has occurred. Option D is not the best answer because dropping OSPF multicast 224.0.0.5 would typically prevent discovery or keep the adjacency in an earlier state, not specifically in ExStart. Therefore, the probable cause is an interface MTU mismatch.

The correct answers are A and B . In the exhibit, the LAN interface shows a fixed VLAN ID value of 100 . Because this value is directly configured in the template rather than represented as a per-device variable, every branch that uses this template will receive the same LAN VLAN ID. This supports option A. Versa configuration examples show that VLAN-tagged interfaces are created by defining logical units with a vlan-id, and organizations then use those tagged interfaces for traffic identification and routing services.

For the MPLS WAN network , the VLAN ID field is shown as a variable or bind-data style value rather than a fixed number. This allows each branch device to receive a different MPLS VLAN ID during onboarding, depending on the branch-specific values supplied in the workflow or device bind data. Therefore, branches can have separate VLAN IDs on the MPLS WAN transport, which supports option B. Versa SD-WAN troubleshooting output also shows WAN interfaces as logical VNI subinterfaces, such as vni-0/1.0 and vni-0/2.0, mapped to SD-WAN transport networks like INET and MPLS.

Option C is incorrect because an INET interface can be untagged, commonly represented with VLAN ID 0. Option D is incorrect because the MPLS VLAN field is intentionally parameterized, not incorrectly configured.

The correct answer is A . In Versa SD-WAN traffic steering, forwarding profiles define how traffic is mapped to WAN circuits, how next hops are selected, and how traffic behaves when SLA conditions are violated. If the requirement is to stop traffic when no SLA-compliant path is available, the relevant behavior is the SLA Violation Action . Setting this option to Drop prevents the VOS device from forwarding the matching traffic over a circuit that does not satisfy the policy’s SLA requirements.

This is the opposite of using Forward , which allows traffic to continue even when the available next hops violate the SLA. Forward may be appropriate for best-effort applications where degraded delivery is better than no delivery, but it is not appropriate for strict business-critical applications that must not use a degraded path.

Nexthop Failure Action controls how the system behaves when a next hop fails, such as waiting for recovery or re-evaluating. Header compression affects packet overhead, and the recompute timer controls periodic recalculation timing. None of those settings directly enforce “drop when SLA is not met.”

The correct answer is A . Versa data-path troubleshooting documentation gives a specific VSM control-plane workflow for checking SD-WAN tunnel objects. After connecting to the VSM daemon, administrators can use show vsm p2mp local-tunnel-sites 0 to inspect local site objects. To check whether remote site objects were learned from BGP or from configuration , Versa instructs administrators to issue show vsm p2mp tunnel-remote-endpoint tenant <</b> tenant-id > on the VSM control plane.

This command is highly relevant when local WAN interfaces are operational, but overlay tunnel formation is incomplete. It shows remote endpoints such as Controllers, hubs, or branches, along with site type, site name, branch ID, tenant ID, remote WAN link information, and tunnel state-related fields.

show interfaces brief confirms interface state and IP addresses, but it does not show learned remote SD-WAN endpoint objects. CGNAT summary is unrelated to tunnel endpoint learning. System storage is useful for disk checks, but not for SD-WAN overlay endpoint troubleshooting.