Question 640
A customer's two CEs announce identical prefixes to a PE. Observed: The VPN intermittently chooses the slower CE even though the primary is healthy. Which change-acceptance control is most relevant to preventing this exact failure?
Explanation
Correct Answer
The control is specific to the initial failure. It requires the result The VPN picks the correct site under normal and simulated failure. and treats The VPN intermittently chooses the slower CE even though the primary is healthy. as a failure signal. The causal concern is pe inbound route preference does not reflect the customer's intended ce priority.
Incorrect Answers
The proposed control is tied to the ce-facing import policy is not accepting those routes, typically observed when the PE does not export the agreed customer prefixes into its VRF. Here the target is pe inbound route preference does not reflect the customer's intended ce priority; monitor the VPN picks the correct site under normal and simulated failure.
It is valid for another service scenario but checks the remote pe sees valid vpn reachability but data plane drops occur after ecmp change. This case instead needs a gate for the vpn intermittently chooses the slower ce even though the primary is healthy and evidence that the VPN picks the correct site under normal and simulated failure.
This gate monitors a different failure, one tenant bypasses inspection due to a direct imported route. It would not detect the current problem: The VPN intermittently chooses the slower CE even though the primary is healthy. The appropriate check requires the VPN picks the correct site under normal and simulated failure.