Pass the Nokia Certified Data Center Fabric Professional 4A0-D03 Questions and answers with ExamsMirror

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

This setup represents single-active Layer 2 EVPN multi-homing. In single-active mode, the Ethernet Segment is configured so that only one PE acts as the active forwarding node for a given service, while the other remains standby. The ports connecting to the host are associated with ES-1 so the EVPN control plane can perform Ethernet Segment discovery, DF election, and standby behavior. If Leaf1 is the active/DF node for the service, all traffic to and from the host flows through Leaf1 until a failure or DF transition occurs. Option D is false because a host LAG is not required for this single-active topology. A LAG is typically required for all-active L2 multi-homing, where the host must treat multiple physical links toward different leaf routers as one logical bundle. In single-active operation, the host can be connected through separate physical links or active/standby access behavior without requiring LACP bundling. The EVPN PEs enforce the active path selection through DF and ES state rather than relying on host-side LAG hashing. Reference: single-active EVPN multi-homing, Ethernet Segment port association, DF-controlled active forwarding.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

An IRB interface is the logical connection point between a Layer 2 MAC-VRF and a Layer 3 IP-VRF. It provides the routed gateway function for hosts in the bridge domain while allowing traffic to move into the routed VRF for inter-subnet forwarding. The correct statement is that when an IRB sub-interface has multiple IP addresses, one can be designated as the primary. This is important because the primary address is used for normal gateway or subnet behavior when more than one address is present on the same routed interface context. Option A is inaccurate because the question is about an IRB sub-interface, not a generic subinterface selection between bridge or routed access modes. Option B is not the defining multi-homing model; EVPN multi-homing is implemented through Ethernet Segment association and MAC-VRF attachment behavior, not by adding multiple IRB subinterfaces for multi-homing. Option D is also wrong because the IRB is the shared logical link between the MAC-VRF and IP-VRF; the design does not require separate IRB subinterfaces on each side as independent constructs. Reference: SR Linux IRB configuration, MAC-VRF to IP-VRF interconnection, primary IP addressing.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In interface-less symmetric routing, the EVPN fabric exchanges host forwarding information using EVPN route type 2 MAC/IP advertisements. RT-2 carries the host MAC address and, when present, the associated host IP address, allowing remote PEs to build the forwarding state needed for distributed gateway operation. Unlike asymmetric routing, interface-less symmetric routing does not require every MAC-VRF to be instantiated on every PE. The design scales better because each leaf only needs the locally attached MAC-VRFs plus the shared IP-VRF/routed VXLAN construct for inter-subnet forwarding. Option B describes an asymmetric forwarding pattern more than a symmetric one; in symmetric routing, both ingress and egress PEs perform routed forwarding functions through the IP-VRF. Option C is also incorrect because anycast gateway is fundamental when multiple leaves provide the same default-gateway service for a subnet. Therefore, the true statement is that forwarding information is exchanged using EVPN route type 2 updates. Reference: interface-less symmetric routing, EVPN RT-2 host MAC/IP signaling, distributed IRB operation.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics] :

In a single-active EVPN multi-homing design, the connected PE routers perform Designated Forwarder election to determine which PE is active for the relevant service or Ethernet Segment. The DF is responsible for forwarding toward the attached segment and, in a Layer 3 multi-homing case, only the active/DF PE advertises the customer IP prefix route toward the EVPN control plane. Single-active redundancy is communicated using Ethernet Segment-related EVPN procedures, including Ethernet A-D information, so remote PEs can identify the redundancy behavior and avoid forwarding traffic to an inactive attachment. The false statement is that the elected DF uses an AD per EVI update to identify itself as primary. AD per EVI is primarily used to advertise per-service Ethernet Segment reachability and support aliasing/load-balancing behavior in multi-homed services. DF election itself is driven by Ethernet Segment route procedures, not by the DF declaring itself primary through AD per EVI. Therefore, option B misstates the role of AD per EVI in the single-active L3 multi-homing control plane. Reference: EVPN DF election, single-active multi-homing, Ethernet A-D routes.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In SR Linux BGP configuration, parameters defined at a more specific hierarchy level can override broader protocol-level settings. Therefore, if a `local-as` value is configured within the BGP group used for EVPN MP-BGP route-reflector sessions, that value overrides the AS number configured directly under the BGP protocol for that group's sessions. Option A is correct. Option B is false because the cluster ID is configured on the route reflector, not on every participating client. The cluster ID identifies the RR cluster and helps prevent route-reflection loops. Option C is false because redundant route reflectors normally operate in parallel rather than as strict primary/backup devices; clients can peer with both for resilience. Option D is misleading because EVPN route reflectors are used to avoid a full mesh of overlay MP-BGP EVPN sessions between leaves, not to replace ordinary underlay eBGP leaf-spine routing sessions. In a clean fabric design, the underlay provides IP reachability, while the EVPN overlay uses MP-BGP sessions, often via route reflectors, to distribute tenant reachability. Reference: SR Linux BGP hierarchy, EVPN route reflector sessions, local-AS override, cluster ID behavior.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

VXLAN provides a Layer 2 overlay over a Layer 3 underlay by encapsulating Ethernet frames in UDP/IP. This allows tenant bridge domains to span a routed IP fabric without requiring the underlay itself to behave like one large Layer 2 network. VXLAN uses a 24-bit VXLAN Network Identifier, which supports approximately 16 million logical overlays, far exceeding the scale of traditional 12-bit VLAN IDs. Because the VXLAN underlay is IP-routed, traffic can benefit from ECMP across equal-cost paths, improving fabric utilization and resiliency. The false statement is B. VXLAN was not originally developed specifically to support EVPN. VXLAN began as a data-plane overlay encapsulation technology, while EVPN later became the preferred control plane for distributing MAC, MAC/IP, multicast, and prefix reachability in VXLAN-based fabrics. In modern data center design, EVPN and VXLAN are commonly paired: VXLAN supplies the encapsulation and VNI-based segmentation, while EVPN supplies scalable control-plane learning and signaling. Reference: VXLAN data plane, EVPN control plane, ECMP underlay, VNI-based tenant isolation.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In asymmetric L3 EVPN routing, each participating PE must have the MAC-VRFs needed to forward traffic in the destination bridge domain. However, the specific exhibit describes two MAC-VRFs interconnected through IP-VRF3, with Leaf-1 hosting MAC-VRF1 and Leaf-2 hosting MAC-VRF2. The false statement is that Leaf-1 and Leaf-2 must both have instances of MAC-VRF1 and MAC-VRF2. That requirement is not true for this described deployment. Each local MAC-VRF connects to IP-VRF3 using an IRB interface, and host MAC/IP information is advertised using EVPN route type 2 so remote PEs can learn endpoint reachability. The question's answer also implies that IP prefix advertisement using route type 5 is part of the control-plane exchange between the leaves for the routed service context. What matters is that the fabric can resolve host and prefix reachability through EVPN without forcing every PE to instantiate every MAC-VRF in this topology. Option B overstates the MAC-VRF placement requirement and is therefore false. Reference: asymmetric L3 EVPN routing, RT-2 host advertisements, RT-5 IP prefix routes, IRB attachment.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In asymmetric L3 EVPN routing, the ingress PE performs the routing decision and then sends traffic across the overlay in the context of the destination MAC-VRF. The egress PE performs Layer 2 MAC forwarding only toward the destination host. This is why options A and B correctly describe asymmetric data-plane behavior. Asymmetric routing relies heavily on EVPN route type 2 MAC/IP Advertisement routes because the ingress PE must know the destination host's MAC/IP binding and the destination bridge domain information. EVPN route type 5, which advertises IP prefixes, is a symmetric L3 EVPN mechanism and is not mandatory for asymmetric routing. Therefore, option C is false. Option D is treated as correct in this asymmetric-routing model because each PE participating in inter-subnet forwarding needs the destination MAC-VRF context to encapsulate traffic toward the correct L2 VNI. This requirement is one reason asymmetric routing scales less efficiently than symmetric routing: MAC-VRF presence and host reachability information must be broadly available. Symmetric routing improves scale by using an IP-VRF routed VXLAN interface and RT-5 prefix routes instead. Reference: asymmetric L3 EVPN routing, ingress IP/MAC forwarding, egress MAC forwarding, RT-2 versus RT-5 usage.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

A gateway-less DCI design extends the data center EVPN/VXLAN model across the WAN without a distinct gateway function separating the data center fabric from the WAN VPN edge. Because the leaf routers or route reflectors must establish the necessary EVPN control-plane and VXLAN data-plane reachability across data centers, the WAN must provide reachability for those fabric endpoints. This design can simplify service continuity and preserve the EVPN overlay model end-to-end, but it does not provide the clean security and QoS demarcation that exists in a decoupled gateway model. A clear demarcation between a border leaf and a separate gateway/WAN PE is specifically a property of decoupled gateway-based DCI, not gateway-less DCI. The gateway-less model also requires reachability between route reflectors or EVPN control-plane endpoints across sites. Therefore, option A is false because it incorrectly assigns the demarcation benefit to the gateway-less design. Reference: gateway-less DCI, stretched EVPN overlay, route-reflector and leaf reachability requirements.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

Designated Forwarder election determines which PE forwards BUM traffic from the EVPN overlay toward a multi-homed Ethernet Segment for a given service. In this scenario, all leaf routers share the same DF candidate list for mac-vrf103, but the election configuration is not identical. Leaf1 and Leaf2 use the default algorithm, while Leaf3 and Leaf4 use the preference-based algorithm. Under preference-based DF election, the candidate with the highest configured preference is selected over lower-preference candidates, assuming the candidate list is valid and consistent. The question states that Leaf3 has the higher preference value compared with Leaf4. Therefore, Leaf3 becomes the DF for mac-vrf103. This is the correct outcome because the preference-based election explicitly overrides simple default behavior by assigning operator-defined priority to a PE. In production designs, this is useful when the operator wants deterministic forwarding placement, maintenance control, or service-specific primary-path selection rather than relying only on the default modulo-based DF selection process. Reference: EVPN DF election, preference-based algorithm, MAC-VRF service forwarding.

================