Question

An ISP provides VoIP and internet services to its customers. For security reasons, these services must be transported in different MPLS Layer 3 VPNs over the ISP core network. The customer CEs do not have the ability to segment the services using different VLANs and have only one uplink interface that does not support VLAN tagging. How should you design the network to ensure that VoIP traffic that is received from the CE goes in the VoIP VPN, and that Internet traffic goes into the Internet VPN on the ISP PE devices?

Accepted Answer

Use policy-based routing to direct traffic into the correct VRF

Answer

Use a secondary interface IP address to differentiate between VoIP and Internet traffic

Answer

Extend the Layer 3 VPN toward the CE

Answer

Enable NBAR on the PE to direct the traffic into the correct VRF

Answer

Use a subinterface on the PE for each service, VoIP and Internet, with different subnets

An ISP provides VoIP and internet services to its customers. For security reasons, these services must be transported in different MPLS Layer 3 VPNs…

Take the free 352-011 practice test

Other 352-011 practice questions