ExamGecko
Question list
Search
Search

Question 61 - JN0-351 discussion

Report
Export

An update to your organization's network security requirements document requires management traffic to be isolated in a non-default routing-instance. You want to implement this requirement on your Junos-based devices.

Which two commands enable this behavior? (Choose two.)

A.
set routing---instances mgmtjunoa interface ge-0/0/0.0
Answers
A.
set routing---instances mgmtjunoa interface ge-0/0/0.0
B.
set routing---instances mgmt_junos interface em1
Answers
B.
set routing---instances mgmt_junos interface em1
C.
set system management---instance
Answers
C.
set system management---instance
D.
set routing---instances mgmt_junos
Answers
D.
set routing---instances mgmt_junos
Suggested answer: C, D

Explanation:

To isolate management traffic in a non-default routing-instance on Junos-based devices, you can use theset system management-instanceandset routing-instances mgmt_junoscommands12.

set system management-instance: This command associates the management interface (usually named fxp0 or em0 for Junos OS, or re0:mgmt-* or re1:mgmt-* for Junos OS Evolved) with the non-default virtual routing and forwarding (VRF) instance1.After you configure the non-default management VRF instance, management traffic no longer has to share a routing table with other control traffic or protocol traffic1.

set routing-instances mgmt_junos: This command creates a new routing instance namedmgmt_junos.The name of the dedicated management VRF instance is reserved and hardcoded asmgmt_junos; you cannot configure any other routing instance by the namemgmt_junos1.

Therefore, options C and D are correct.Options A and B are not correct because they attempt to assign an interface to themgmt_junosrouting instance, which is not necessary for isolating management traffic1.

asked 18/09/2024
Simon Merlin AGHOKENG
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first