Question 610
A centralized Internet breakout changes a PE security policy. Observed: One customer's default route is accidentally propagated to every tenant. What evidence would validate recovery from this precise failure mode?
Explanation
Correct Answer
The intended result is Only subscribed customers receive the shared breakout route. It specifically verifies recovery from broad rt import/export policy exposed the default across unrelated vpns, which produced the original symptom: One customer's default route is accidentally propagated to every tenant. It is stronger evidence than a generic interface-up indicator.
Incorrect Answers
That observation would verify a separate fault involving the customer-facing logical interface was not bound to the intended routing instance. Its symptom is The configured interface belongs to the master instance instead of its customer VRF. For this case the actual issue is broad rt import/export policy exposed the default across unrelated vpns, and the relevant success signal is Only subscribed customers receive the shared breakout route.
This result is useful in another case with evidence Provider-wide BGP policy accidentally imports the provider loopback into a customer VRF. It does not test recovery from one customer's default route is accidentally propagated to every tenant. Check instead whether only subscribed customers receive the shared breakout route.
It confirms an unrelated service correction: The remote VRF does not import the route's export route target. The present case reports One customer's default route is accidentally propagated to every tenant. Its completion test is Only subscribed customers receive the shared breakout route.