4A0-D03 Questions and Answers

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

EVPN route type 4 is the Ethernet Segment route. Its core role is to advertise Ethernet Segment membership so that PEs attached to the same multi-homed segment can discover each other. This discovery is essential for multi-homing procedures such as DF election, split-horizon behavior, and redundancy handling. When multiple PEs advertise the same ESI, the EVPN control plane can build the candidate set of PEs that participate in that Ethernet Segment. This enables DF election for BUM forwarding and supports the correct interpretation of the segment's redundancy model. The incorrect statement is option C. The election algorithm itself is not the basic function of the route type 4 advertisement in the way the question frames it. The route type is primarily about Ethernet Segment discovery and participation; the algorithmic decision process is derived from configured DF election behavior and candidate information, not from route type 4 acting as a generic algorithm identifier. Therefore, route type 4 enables DF procedures, but it is not described as the mechanism that identifies the election algorithm type. Reference: EVPN RT-4 Ethernet Segment route, DF election, multi-homing discovery.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

Layer 3 multi-homing is fundamentally about redundant or load-balanced L3 reachability for external prefixes, not about Layer 2 broadcast-domain flooding toward a host. In single-active L3 multi-homing, DF election determines which attached leaf is active for the Ethernet Segment, and only that leaf advertises or forwards for the attached customer route as required by the redundancy model. In all-active L3 multi-homing, multiple leaf routers can be valid next-hops for the same learned third-party prefix, and remote PEs may load-balance toward them based on the Ethernet Segment association. Learned external prefixes are carried as EVPN route type 5 IP Prefix routes, which is the correct route type for L3 reachability. The Ethernet Segment is associated with the next-hop for those prefixes so that remote PEs understand the multi-homed nature of the path. Option B is false because BUM forwarding is a Layer 2 EVPN concern. In an all-active L3 multi-homing scenario, DF election is not used to identify a BUM-forwarding leaf for host traffic in the same way it is used in Layer 2 multi-homing services. Reference: L3 EVPN multi-homing, RT-5 prefix routes, ES next-hop behavior.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics] :

In a single-active EVPN multi-homing design, the connected PE routers perform Designated Forwarder election to determine which PE is active for the relevant service or Ethernet Segment. The DF is responsible for forwarding toward the attached segment and, in a Layer 3 multi-homing case, only the active/DF PE advertises the customer IP prefix route toward the EVPN control plane. Single-active redundancy is communicated using Ethernet Segment-related EVPN procedures, including Ethernet A-D information, so remote PEs can identify the redundancy behavior and avoid forwarding traffic to an inactive attachment. The false statement is that the elected DF uses an AD per EVI update to identify itself as primary. AD per EVI is primarily used to advertise per-service Ethernet Segment reachability and support aliasing/load-balancing behavior in multi-homed services. DF election itself is driven by Ethernet Segment route procedures, not by the DF declaring itself primary through AD per EVI. Therefore, option B misstates the role of AD per EVI in the single-active L3 multi-homing control plane. Reference: EVPN DF election, single-active multi-homing, Ethernet A-D routes.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

A decoupled gateway-based DCI model separates the data center border-leaf function from the WAN PE function. This separation is the key design point. The border leaf remains part of the data center EVPN/VXLAN environment, while the WAN PE participates in WAN VPN transport and policy enforcement. Because the roles are split across two devices, the handoff between the border leaf and WAN PE provides a clean administrative and operational boundary. That boundary is useful for security policy, QoS marking, traffic classification, and troubleshooting ownership. The WAN does not need direct reachability to every leaf and route reflector as in a gateway-less model. The WAN PE also does not peer directly with the data center route reflector in a decoupled model; route exchange occurs through the border-leaf/WAN-PE handoff. VXLAN tunnels between leaf routers across different data centers are characteristic of gateway-less extension, not decoupled gateway operation. Therefore, the statement about clear demarcation between the data center border leaf and WAN PE is the accurate description. Reference: decoupled gateway-based DCI, security/QoS demarcation, WAN PE separation.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

This setup represents a Layer 2 EVPN multi-homing attachment where the host is connected to Leaf1 and Leaf2 through an Ethernet Segment named ES-1. In SR Linux EVPN multi-homing, the Ethernet Segment must be associated with the physical or logical attachment interfaces facing the host. This allows the PEs to advertise Ethernet Segment information into EVPN, participate in DF election, and apply the appropriate forwarding behavior for single-active or all-active redundancy. Option D is therefore correct. Option A is not necessarily true because the exhibit indicates an active/standby style attachment, not all-active operation. Option B is also incorrect because ECMP on the remote MAC-VRF is not the mechanism that defines the local ES association or single-active behavior. Option C is wrong in this setup because a host LAG is required for common all-active L2 multi-homing with LACP, but the shown design uses an active/standby-style attachment where the Ethernet Segment is bound to the host-facing ports. The technical anchor is that ES-1 must be associated to the access ports connecting the host into the multi-homed MAC-VRF service. Reference: L2 EVPN multi-homing, Ethernet Segment interface association, DF behavior.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

The scenario describes Layer 3 EVPN multi-homing with an IP-VRF service and an external CE VNF advertising the 40.40.40.0/24 prefix through BGP. A DF election can occur among the leaf routers participating in the Ethernet Segment, and the active/primary forwarding node is used for the relevant service behavior. The AD per EVI route can participate in identifying service-level reachability for the Ethernet Segment, and the prefix traffic follows the valid advertised path toward the CE VNF. Because Leaf3 has the BGP connection to the CE VNF, traffic for 40.40.40.0/24 is forwarded through Leaf3. Option B is false because it incorrectly states that all connected leaf routers will use single-active redundancy. The exhibit and answer context indicate a more specific forwarding/primary selection for the service, not a blanket statement that every connected leaf operates using single-active redundancy. In L3 multi-homing, redundancy behavior depends on the ES mode, prefix advertisement, next-hop association, and CE connectivity. The forwarding decision for the customer prefix is tied to the active/valid route advertisement, not to every leaf uniformly acting as single-active. Reference: L3 EVPN multi-homing, DF election, AD per EVI role, PE-CE BGP prefix forwarding.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

When a new Layer 2 EVPN MAC-VRF instance is enabled, the PE advertises an Inclusive Multicast Ethernet Tag route, commonly called an IMET route or EVPN route type 3. The IMET route is used to auto-discover remote PEs that participate in the same EVPN service and to build the BUM flooding list for that MAC-VRF. In this topology, all leaf routers peer with the route reflector on Spine-1. Leaf-1 therefore advertises its IMET route to the route reflector, not directly to Leaf-2 and Leaf-3. The route reflector then reflects the EVPN update to the other client leaves. Leaf-2 and Leaf-3 import the route based on matching route-target policy and add Leaf-1 to the replication list for broadcast, unknown unicast, and multicast traffic. Option B is the step that is not taken because it incorrectly describes direct leaf-to-leaf EVPN advertisement. In a route-reflector design, the RR centralizes EVPN route distribution and avoids the need for a full mesh of MP-BGP EVPN sessions between leaves. Reference: EVPN RT-3 IMET route, route-reflector operation, BUM flooding-list auto-discovery.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

VXLAN provides a Layer 2 overlay over a Layer 3 underlay by encapsulating Ethernet frames in UDP/IP. This allows tenant bridge domains to span a routed IP fabric without requiring the underlay itself to behave like one large Layer 2 network. VXLAN uses a 24-bit VXLAN Network Identifier, which supports approximately 16 million logical overlays, far exceeding the scale of traditional 12-bit VLAN IDs. Because the VXLAN underlay is IP-routed, traffic can benefit from ECMP across equal-cost paths, improving fabric utilization and resiliency. The false statement is B. VXLAN was not originally developed specifically to support EVPN. VXLAN began as a data-plane overlay encapsulation technology, while EVPN later became the preferred control plane for distributing MAC, MAC/IP, multicast, and prefix reachability in VXLAN-based fabrics. In modern data center design, EVPN and VXLAN are commonly paired: VXLAN supplies the encapsulation and VNI-based segmentation, while EVPN supplies scalable control-plane learning and signaling. Reference: VXLAN data plane, EVPN control plane, ECMP underlay, VNI-based tenant isolation.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In interface-less symmetric routing, the EVPN fabric exchanges host forwarding information using EVPN route type 2 MAC/IP advertisements. RT-2 carries the host MAC address and, when present, the associated host IP address, allowing remote PEs to build the forwarding state needed for distributed gateway operation. Unlike asymmetric routing, interface-less symmetric routing does not require every MAC-VRF to be instantiated on every PE. The design scales better because each leaf only needs the locally attached MAC-VRFs plus the shared IP-VRF/routed VXLAN construct for inter-subnet forwarding. Option B describes an asymmetric forwarding pattern more than a symmetric one; in symmetric routing, both ingress and egress PEs perform routed forwarding functions through the IP-VRF. Option C is also incorrect because anycast gateway is fundamental when multiple leaves provide the same default-gateway service for a subnet. Therefore, the true statement is that forwarding information is exchanged using EVPN route type 2 updates. Reference: interface-less symmetric routing, EVPN RT-2 host MAC/IP signaling, distributed IRB operation.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In EVPN PE-CE routing, the PE exchanges ordinary IPv4 or IPv6 unicast routing information with the CE. When the PE learns CE prefixes, it imports them into the tenant IP-VRF and advertises them to other EVPN PEs as EVPN route type 5 IP Prefix routes. Conversely, when the PE receives EVPN routes from remote PEs, it can advertise corresponding IPv4/IPv6 BGP updates toward the CE, subject to policy. Import and export policies are essential because they control which customer routes are accepted, which EVPN-learned routes are advertised, and how attributes are modified. Option C is false because iBGP is not the preferred PE-CE model in this context. eBGP is typically preferred between PE and CE because it creates a clean administrative routing boundary between the provider/data-center edge and the customer or external router. Using eBGP also simplifies route policy, loop prevention, and operational separation. The CE does not need to participate in the EVPN overlay; it speaks standard BGP unicast with the PE, while the PE performs the EVPN RT-5 advertisement into the fabric. Reference: EVPN PE-CE BGP routing, eBGP preference, RT-5 prefix advertisement, import/export policy.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In a decoupled gateway-based DCI design, the data center border leaf and the WAN PE are separate devices. Traffic between them can be identified using VLAN tags, allowing different data center EVPN services to be mapped to corresponding WAN VPN services. This architecture provides a clean operational boundary: the border leaf remains aligned with the data center EVPN/VXLAN fabric, while the WAN PE handles WAN VPN transport, QoS, security policy, and service interconnection. The separation gives a strong demarcation point for troubleshooting and administrative control. Option D is false because the WAN PE does not maintain an MP-BGP EVPN peering session with the data center route reflector. In the decoupled model, the route reflector remains part of the data center EVPN control plane, while the WAN PE exchanges routing or service information with the border leaf through the local handoff model. Direct WAN PE-to-data-center-RR peering would blur the separation that defines the decoupled design and would make the WAN PE part of the data center EVPN overlay control plane, which is not the intended architecture. Reference: decoupled gateway DCI, VLAN handoff, WAN VPN mapping, security/QoS demarcation, route-reflector separation.

================