Juniper JN0-664 Exam With Confidence Using Practice Dumps

A sham link is a logical link between two PE routers that belong to the same OSPF area but are connected through an L3VPN. A sham link makes the PE routers appear as if they are directly connected, and prevents OSPF from preferring an intra-area back door link over the VPN backbone. A sham link creates an OSPF multihop neighborship between the PE routers using TCP port 646. The PEs exchange Type 1 OSPF LSAs instead of Type 3 OSPF LSAs for the L3VPN routes, which allows OSPF to use the correct metric for route selection1.

Interprovider Option C for Layer 3 VPNs involves the use of Autonomous System Boundary Routers (ASBRs) to exchange labeled VPN-IPv4 routes between different Autonomous Systems (AS). This option requires BGP sessions between ASBRs, and the VPN routes are carried end-to-end using MPLS labels. Here’s a detailed analysis of the roles of different routers in this scenario:

1. **ASBR Routers**:

- ASBRs are responsible for exchanging VPN-IPv4 routes between different ASes.

- **A. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.**

- Correct. ASBRs maintain routes to internal destinations within their own AS, and they also need to know the loopback addresses of PEs in the other AS to set up the BGP sessions and MPLS tunnels.

2. **PE Routers**:

- PE routers are responsible for maintaining VPN routes and label information to forward VPN traffic correctly.

- **B. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**

- Correct. PE routers need to maintain:

- Internal routes within their AS for routing.

- Loopback addresses of other AS PEs for establishing MPLS LSPs.

- L3VPN routes to provide end-to-end VPN connectivity.

3. **P Routers**:

- P routers are the core routers that do not participate in BGP VPN routing but forward labeled packets based on MPLS labels.

- **C. P routers only maintain the internal routes from their own AS.**

- Correct. P routers maintain the internal routing information to forward packets within the AS and use MPLS labels for forwarding VPN packets. They do not maintain VPN routes or routes from other ASes.

4. **Incorrect Statements**:

- **D. P routers maintain the internal routes from its own AS and the loopback address from the other AS PEs.**

- Incorrect. P routers do not need to maintain the loopback addresses of other AS PEs. They only maintain internal routing and MPLS label information.

- **E. ASBR routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**

- Incorrect. ASBR routers do not maintain L3VPN routes. They exchange labeled VPN-IPv4 routes with other ASBRs and forward them to PE routers.

**Conclusion**:

The correct answers are:

**A. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.**

**B. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**

**C. P routers only maintain the internal routes from their own AS.**

**References**:

- Juniper Networks Documentation on Interprovider VPNs: [Interprovider VPN

- MPLS and VPN Architectures, CCIP Edition by Ivan Pepelnjak and Jim Guichard

In the exhibit, we see two VRF (Virtual Routing and Forwarding) instances, CE-1 and CE-2, configured on a Juniper router. Each VRF is associated with a route-distinguisher (RD) and a vrf-target value.

Understanding the Role of vrf-target

The vrf-target is used to define Route Targets (RT), which control the import and export of VPN routes in MPLS Layer 3 VPNs (L3VPNs).

If two VRFs share the same RT, they will import each other's routes, allowing communication between them.

In this case, both VRFs have the same vrf-target:

vrf-target target:65512:100;

Since both CE-1 and CE-2 have the same RT (65512:100), they will import and export each other’s routes, enabling route sharing between them.

Understanding route-distinguisher (RD)

The RD (Route Distinguisher) only ensures uniqueness of overlapping IP prefixes within the MPLS network.

It does not control route sharing between VRFs.

In the exhibit, both VRFs have the same RD (65512:1), but this does not influence whether they share routes.

Correct Answer Selection

A (Correct): The vrf-target configuration enables route sharing between CE-1 and CE-2 since they have the same RT (65512:100).

B (Incorrect): The vrf-target does the opposite—it allows sharing, not blocking.

C (Incorrect): The route-distinguisher only provides unique route identification, but does not affect route sharing.

D (Incorrect): Again, route-distinguisher has no impact on route sharing.

Reference from Juniper Official Documentation

✅ Juniper Documentation - Junos MPLS VPNs Configuration Guide:

"Route targets (vrf-target) are used to control the import and export of VPN routes between different VRFs. VRFs with the same route target can import and export routes to each other, enabling inter-VRF communication."

Thus, the correct answer is:

✅ A. The vrf-target configuration will allow routes to be shared between CE-1 and CE-2.