Nokia 4A0-D03 - Nokia SR Linux EVPN and Data Center Interconnect

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

Asymmetric routing relies heavily on host MAC/IP information because the ingress PE performs routing into the destination subnet and then sends the frame across the overlay using the destination MAC-VRF/VNI. This means PEs require enough ARP and MAC/IP binding information to forward traffic toward remote hosts correctly. If a host has multiple IP addresses on the same interface, separate EVPN route type 2 advertisements may be needed to communicate each IP-to-MAC binding. The ingress and egress PEs participate in MAC and IP forwarding across the end-to-end service path, but the forwarding responsibilities differ by direction and stage. The false statement is option C. The statement says all MAC-VRFs connected to the L3 EVPN network must exist on each PE, but that is not the correct requirement in this question's verified answer set. In practical EVPN designs, the exact MAC-VRF placement depends on whether the service is implemented as asymmetric, symmetric, interface-less, or interface-ful routing. Here, the course answer marks the universal MAC-VRF requirement as false. Reference: asymmetric L3 EVPN routing, RT-2 MAC/IP advertisements, ARP and MAC forwarding behavior.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

EVPN route type 4 is the Ethernet Segment route. Its core role is to advertise Ethernet Segment membership so that PEs attached to the same multi-homed segment can discover each other. This discovery is essential for multi-homing procedures such as DF election, split-horizon behavior, and redundancy handling. When multiple PEs advertise the same ESI, the EVPN control plane can build the candidate set of PEs that participate in that Ethernet Segment. This enables DF election for BUM forwarding and supports the correct interpretation of the segment's redundancy model. The incorrect statement is option C. The election algorithm itself is not the basic function of the route type 4 advertisement in the way the question frames it. The route type is primarily about Ethernet Segment discovery and participation; the algorithmic decision process is derived from configured DF election behavior and candidate information, not from route type 4 acting as a generic algorithm identifier. Therefore, route type 4 enables DF procedures, but it is not described as the mechanism that identifies the election algorithm type. Reference: EVPN RT-4 Ethernet Segment route, DF election, multi-homing discovery.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In interface-less symmetric routing, the EVPN fabric exchanges host forwarding information using EVPN route type 2 MAC/IP advertisements. RT-2 carries the host MAC address and, when present, the associated host IP address, allowing remote PEs to build the forwarding state needed for distributed gateway operation. Unlike asymmetric routing, interface-less symmetric routing does not require every MAC-VRF to be instantiated on every PE. The design scales better because each leaf only needs the locally attached MAC-VRFs plus the shared IP-VRF/routed VXLAN construct for inter-subnet forwarding. Option B describes an asymmetric forwarding pattern more than a symmetric one; in symmetric routing, both ingress and egress PEs perform routed forwarding functions through the IP-VRF. Option C is also incorrect because anycast gateway is fundamental when multiple leaves provide the same default-gateway service for a subnet. Therefore, the true statement is that forwarding information is exchanged using EVPN route type 2 updates. Reference: interface-less symmetric routing, EVPN RT-2 host MAC/IP signaling, distributed IRB operation.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

When a new Layer 2 EVPN MAC-VRF instance is enabled, the PE advertises an Inclusive Multicast Ethernet Tag route, commonly called an IMET route or EVPN route type 3. The IMET route is used to auto-discover remote PEs that participate in the same EVPN service and to build the BUM flooding list for that MAC-VRF. In this topology, all leaf routers peer with the route reflector on Spine-1. Leaf-1 therefore advertises its IMET route to the route reflector, not directly to Leaf-2 and Leaf-3. The route reflector then reflects the EVPN update to the other client leaves. Leaf-2 and Leaf-3 import the route based on matching route-target policy and add Leaf-1 to the replication list for broadcast, unknown unicast, and multicast traffic. Option B is the step that is not taken because it incorrectly describes direct leaf-to-leaf EVPN advertisement. In a route-reflector design, the RR centralizes EVPN route distribution and avoids the need for a full mesh of MP-BGP EVPN sessions between leaves. Reference: EVPN RT-3 IMET route, route-reflector operation, BUM flooding-list auto-discovery.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

Ethernet Auto-Discovery per EVI information is used in EVPN multi-homing to advertise that a PE has reachability to a particular Ethernet Segment for a specific EVPN instance. Remote PEs use this information for aliasing, allowing them to forward known unicast traffic toward a multi-homed Ethernet Segment through eligible PEs rather than relying only on the PE that advertised a specific MAC route. In VXLAN-based EVPN, the update also carries information needed by remote peers to select the proper data-plane encapsulation and VNI for the service. The multi-homing behavior advertised with the Ethernet Segment enables remote peers to understand whether the attachment is operating in all-active or single-active mode. Option D is the false statement in this context because route-target handling is a general BGP EVPN import/export mechanism associated with VPN route policy and extended communities; it is not the specific operational function that defines AD per EVI behavior. The AD per EVI route's purpose is Ethernet Segment reachability for an EVI, not route-target-based service identification by itself. Reference: EVPN route type 1, AD per EVI, aliasing and multi-homing signaling.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

An IRB interface provides the logical L3 gateway function between a Layer 2 MAC-VRF and a Layer 3 IP-VRF on the same PE. It allows locally bridged hosts to route into the tenant IP-VRF while preserving EVPN control-plane signaling for MAC/IP reachability. The IRB subinterface must have at least one IP address because it acts as the routed gateway for the subnet, and it may also be configured with ACLs to apply traffic policy at the L3 boundary. Option B is false because it incorrectly generalizes the IRB relationship. In SR Linux EVPN service modeling, an IRB subinterface connects a MAC-VRF to an IP-VRF in a controlled one-to-one service attachment context; the design is not that both IP-VRFs and MAC-VRFs arbitrarily contain multiple IRB interfaces for the same relationship. A MAC-VRF has its IRB gateway association into the IP-VRF, and the IP-VRF may connect to multiple MAC-VRFs through distinct IRB contexts, but the statement as written is not the correct rule for IRB interface behavior. Reference: SR Linux IRB interface operation, MAC-VRF/IP-VRF interconnection, gateway IP and ACL support.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

The exhibit describes a Layer 3 multi-homing scenario where the Ethernet Segment is associated with an IP-VRF and the configuration references an EVI value of 1000. The segment is configured with all-active multi-homing, allowing multiple attached leaf routers to advertise reachability for the same external L3 next-hop or third-party prefix attachment. In this model, the Ethernet Segment represents the shared L3 attachment and is used by EVPN to associate remote prefix reachability with the multi-homed segment. The incorrect statement is that a LAG must be configured on the connected leaf routers and the host. That requirement is specific to many Layer 2 all-active host attachment designs, where the host commonly uses LACP toward multiple leaf routers and the leaf LAG subinterfaces are associated with the Ethernet Segment. In Layer 3 multi-homing, the attached device can be a router or VNF, and the EVPN ES association can be used for L3 prefix reachability without mandating that the host side be configured as a LAG. Reference: L3 EVPN multi-homing, EVI association, all-active Ethernet Segment behavior.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In SR Linux, a Layer 2 EVPN service is implemented using a MAC-VRF network instance. The MAC-VRF represents the tenant bridge domain and is associated with access subinterfaces and a VXLAN data-plane mapping. Local hosts are learned through the data plane when Ethernet frames arrive on local interfaces. Remote hosts, however, are not learned by flooding or by configuring static per-peer VXLAN interfaces. They are learned through MP-BGP EVPN updates, especially EVPN route type 2 MAC/IP Advertisement routes. Option B is false because SR Linux does not require a separate manually configured VXLAN interface toward each remote VTEP for the MAC-VRF. Instead, the MAC-VRF is bound to VXLAN encapsulation and a VNI, while remote VTEPs and their MAC reachability are discovered dynamically through the EVPN control plane. This is one of the central advantages of EVPN compared with static VXLAN flood-and-learn models: the overlay endpoints and endpoint reachability are signaled through BGP, reducing manual configuration and improving scale. Reference: SR Linux L2 EVPN MAC-VRF configuration, MP-BGP EVPN learning, VXLAN data-plane mapping.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In an integrated gateway-based DCI design, the same physical or logical router performs both the data center gateway role and the WAN PE role. This is why option D is correct. The device terminates or participates in the data center-side EVPN service and also handles the WAN-side VPN transport, including route translation or re-advertisement where needed. This approach avoids exposing every data center leaf router to the WAN and avoids requiring route reflector reachability between data centers. It also avoids building VXLAN tunnels directly between all leaf routers in separate data centers. Those characteristics belong to gateway-less DCI, where the EVPN overlay stretches more directly across the WAN and the WAN must carry the underlay or overlay reachability required by the data center leaves. Integrated gateway design is more controlled: the gateway is the interworking point, which makes it suitable when the provider or operator wants a strong service boundary and centralized DCI policy enforcement. Reference: integrated gateway-based DCI, single-router gateway/WAN PE function, EVPN/VPN interworking.

================