H12-831_V1-0 practice question 10 of 35

About the site in the BGPIMPLS IP VPN network architecture. Which of the following descriptions is correct?

Full set: 265 questions

Domain BGP Advanced

Answer options
A: in any case, belong to the sameVPNDifferent sites on the
B: through the sameCETerminals connected to the operator's network may belong to different sites(MCE) Correct answer
C: site is a groupIPsystem, a network of hosts cannot be called a site
D: The two geographically separated networks must belong to different sites
Correct Answer:
B. through the sameCETerminals connected to the operator's network may belong to different sites(MCE)
Explanation

In a BGP/MPLS IP VPN architecture, a "site" refers to a customer's private network that connects to the service provider's network. Option B correctly describes the functionality of a Multi-VPN-Instance CE (MCE), also known as a Multi-VRF CE. An MCE is a single Customer Edge (CE) device that can maintain separate routing and forwarding tables (VRFs) for different sites. This allows a single physical device and link to the provider network to serve multiple distinct sites, which may belong to the same or different VPNs, thereby providing traffic isolation and flexible network design for the customer.

Why Incorrect

A. A core purpose of a VPN is to interconnect multiple, distinct sites that belong to the same customer organization over a shared provider network.
C. A site is fundamentally a customer's IP network, which is a system composed of hosts, servers, and other network devices. A network of hosts is a perfect example of a site.
D. The definition of a site is based on its routing domain and connectivity policies, not strictly its geographical location. While geographically separate networks are typically different sites, this is not a mandatory rule.

References

1. Huawei HedEx Documentation: In the NE40E & NE80E & NE5000E V800R010C10SPC500 Feature Description - VPN, the concept of MCE is detailed. It explains that an MCE device can connect to multiple VPN instances on a PE (Provider Edge) router, allowing different services or sites to be accessed through the same CE. This directly supports the scenario described in option B. (Refer to sections on "MPLS L3VPN" and "MCE").

2. RFC 4364 - BGP/MPLS IP Virtual Private Networks (VPNs):

Section 2, "Sites and CEs": Defines a site as "a set of IP systems with mutual IP connectivity, without relying on the service provider network." This contradicts option C.

Section 2, "Sites and CEs": States, "A set of sites which can communicate with each other over an SP backbone is known as a VPN." This shows that a VPN is composed of multiple sites, making option A incorrect. The RFC does not impose a strict geographical constraint, making the absolute term "must" in option D incorrect.

3. Huawei VRP (Versatile Routing Platform) Documentation: The Huawei ME60 V800R011C10 Configuration Guide - VPN describes MCE configuration and functionality. It states, "MCE is a device that can function as a CE for multiple VPN instances... An MCE is usually a high-performance switch or router that can manage multiple users." This confirms that a single CE can connect what are effectively different sites to the provider network.

Scroll to Top