Practice Free 4A0-D03 Nokia SR Linux EVPN and Data Center Interconnect Exam Questions Answers With Explanation

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

When Leaf-1 receives an ARP request from Host-1, it learns the source MAC address in the local MAC table and learns the source IP/MAC binding in the proxy ARP table. For EVPN distribution, the relevant control-plane advertisement is an EVPN route type 2 MAC/IP advertisement containing Host-1's MAC and the actual host IP address, 192.168.100.1. This allows remote PEs to populate their EVPN-derived forwarding and proxy ARP state with the correct endpoint binding. Option A is false because advertising the host MAC with the IP address set to 0.0.0.0 does not represent the learned MAC/IP binding required for proxy ARP synchronization. A MAC-only RT-2 advertisement may exist in EVPN contexts, but the question specifically states that Leaf-1 has learned the MAC/IP binding through ARP and is distributing that information. Therefore, the valid advertisement must include the real host IP address. Remote PEs use the MAC/IP route to learn the endpoint, not an all-zero IP placeholder for this proxy ARP learning event. Reference: EVPN RT-2 MAC/IP advertisement, proxy ARP table population, endpoint synchronization.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In SR Linux, a Layer 2 EVPN service is implemented using a MAC-VRF network instance. The MAC-VRF represents the tenant bridge domain and is associated with access subinterfaces and a VXLAN data-plane mapping. Local hosts are learned through the data plane when Ethernet frames arrive on local interfaces. Remote hosts, however, are not learned by flooding or by configuring static per-peer VXLAN interfaces. They are learned through MP-BGP EVPN updates, especially EVPN route type 2 MAC/IP Advertisement routes. Option B is false because SR Linux does not require a separate manually configured VXLAN interface toward each remote VTEP for the MAC-VRF. Instead, the MAC-VRF is bound to VXLAN encapsulation and a VNI, while remote VTEPs and their MAC reachability are discovered dynamically through the EVPN control plane. This is one of the central advantages of EVPN compared with static VXLAN flood-and-learn models: the overlay endpoints and endpoint reachability are signaled through BGP, reducing manual configuration and improving scale. Reference: SR Linux L2 EVPN MAC-VRF configuration, MP-BGP EVPN learning, VXLAN data-plane mapping.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In an SR Linux Layer 2 EVPN MAC-VRF, locally attached MAC addresses are learned through the data plane on local access interfaces, while remote MAC addresses are learned from MP-BGP EVPN control-plane advertisements and installed with a VXLAN next-hop. The exhibit shows one local learned MAC on an Ethernet subinterface and another MAC learned through EVPN with a VXLAN interface and VNI 100. The remote VTEP or next-hop information identifies the remote endpoint, and the VNI maps the received VXLAN traffic to the correct MAC-VRF service. The false statement is C because saying that the MAC address associated with the vxlan-interface “will not age out” is too absolute. A remote EVPN MAC is not aged in the same way as a local data-plane-learned MAC, but it can still be removed when the corresponding EVPN route is withdrawn, invalidated, or no longer present in the control plane. The “N/A” style aging behavior does not mean permanent retention. Reference: SR Linux MAC-VRF verification, local MAC learning, EVPN-learned remote MACs, VXLAN VNI mapping.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

A distributed Layer 2 EVPN in SR Linux is implemented using MAC-VRF network instances, EVPN control-plane signaling, and VXLAN data-plane encapsulation. A common mistake is assuming that every PE must use the same EVI value for the same L2 service. In SR Linux, the important operational requirement is that the correct EVPN routes are imported and exported using matching route-target policy, not necessarily that every PE has the same locally configured EVI. Therefore, option A is false. The route distinguisher can be automatically generated using local values such as the autonomous system number and EVI, giving each PE's EVPN routes uniqueness in MP-BGP. A MAC-VRF is associated with VXLAN encapsulation for its data-plane service mapping, and route targets may need to be manually configured when leaf routers are in different autonomous systems because automatic derivation may not produce matching import/export policy across AS boundaries. The key separation is this: the RD gives uniqueness, the route target controls service membership, and the EVI is a local service identifier rather than a universal mandatory match in all designs. Reference: SR Linux distributed L2 EVPN configuration, EVI, RD auto-generation, route-target policy.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

The route target is the extended community consistently associated with EVPN updates to control route import and export between EVPN instances. In SR Linux EVPN services, route targets determine which MAC-VRF or IP-VRF should import a received EVPN route. This is essential for tenant separation because multiple tenants may use overlapping MAC or IP address spaces while sharing the same physical fabric and BGP control plane. The AFI/SAFI is not an extended community; it identifies the BGP address family and subsequent address family used to carry EVPN NLRI. The EVPN route type is also not an extended community; it is part of the EVPN NLRI structure and identifies whether the route is RT-1, RT-2, RT-3, RT-4, RT-5, and so on. The VXLAN network ID may be carried or inferred through service and encapsulation-specific attributes, but it is not universally present as the required extended community in every EVPN update. The route target is the mandatory policy element that enables receiving PEs to place EVPN routes into the correct service context. Reference: EVPN extended communities, route-target import/export policy, tenant service identification.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

A gateway-less DCI design extends the data center EVPN/VXLAN model across the WAN without a distinct gateway function separating the data center fabric from the WAN VPN edge. Because the leaf routers or route reflectors must establish the necessary EVPN control-plane and VXLAN data-plane reachability across data centers, the WAN must provide reachability for those fabric endpoints. This design can simplify service continuity and preserve the EVPN overlay model end-to-end, but it does not provide the clean security and QoS demarcation that exists in a decoupled gateway model. A clear demarcation between a border leaf and a separate gateway/WAN PE is specifically a property of decoupled gateway-based DCI, not gateway-less DCI. The gateway-less model also requires reachability between route reflectors or EVPN control-plane endpoints across sites. Therefore, option A is false because it incorrectly assigns the demarcation benefit to the gateway-less design. Reference: gateway-less DCI, stretched EVPN overlay, route-reflector and leaf reachability requirements.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In a gateway-less DCI design, there is no dedicated gateway device performing EVPN-to-WAN service interworking. Instead, the data center EVPN overlay is extended across the WAN more directly. Because leaf routers must establish overlay reachability across sites, the IP addresses of the leaf VTEPs need to be reachable through the WAN, commonly by redistributing or otherwise carrying the necessary loopback reachability. The WAN transparently carries the EVPN/VXLAN overlay, and leaf routers can establish VXLAN tunnels across the WAN to remote leaves. Option D is false because it introduces “data center gateway routers” maintaining MP-BGP EVPN peering with the data center route reflector. That is not the gateway-less model; it describes a gateway-based role that does not exist as a separate function in this architecture. In gateway-less DCI, the EVPN control-plane and VXLAN data-plane extension are handled by the fabric endpoints themselves, so the design trades demarcation and interworking control for a more direct overlay extension model. Reference: gateway-less DCI, WAN reachability for leaf VTEPs, transparent EVPN overlay carriage, VXLAN tunnel extension.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In an integrated gateway-based DCI design, the same physical or logical router performs both the data center gateway role and the WAN PE role. This is why option D is correct. The device terminates or participates in the data center-side EVPN service and also handles the WAN-side VPN transport, including route translation or re-advertisement where needed. This approach avoids exposing every data center leaf router to the WAN and avoids requiring route reflector reachability between data centers. It also avoids building VXLAN tunnels directly between all leaf routers in separate data centers. Those characteristics belong to gateway-less DCI, where the EVPN overlay stretches more directly across the WAN and the WAN must carry the underlay or overlay reachability required by the data center leaves. Integrated gateway design is more controlled: the gateway is the interworking point, which makes it suitable when the provider or operator wants a strong service boundary and centralized DCI policy enforcement. Reference: integrated gateway-based DCI, single-router gateway/WAN PE function, EVPN/VPN interworking.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

In a decoupled gateway-based DCI design, the data center border leaf and the WAN PE are separate devices. Traffic between them can be identified using VLAN tags, allowing different data center EVPN services to be mapped to corresponding WAN VPN services. This architecture provides a clean operational boundary: the border leaf remains aligned with the data center EVPN/VXLAN fabric, while the WAN PE handles WAN VPN transport, QoS, security policy, and service interconnection. The separation gives a strong demarcation point for troubleshooting and administrative control. Option D is false because the WAN PE does not maintain an MP-BGP EVPN peering session with the data center route reflector. In the decoupled model, the route reflector remains part of the data center EVPN control plane, while the WAN PE exchanges routing or service information with the border leaf through the local handoff model. Direct WAN PE-to-data-center-RR peering would blur the separation that defines the decoupled design and would make the WAN PE part of the data center EVPN overlay control plane, which is not the intended architecture. Reference: decoupled gateway DCI, VLAN handoff, WAN VPN mapping, security/QoS demarcation, route-reflector separation.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

A decoupled gateway-based DCI model separates the data center border-leaf function from the WAN PE function. This separation is the key design point. The border leaf remains part of the data center EVPN/VXLAN environment, while the WAN PE participates in WAN VPN transport and policy enforcement. Because the roles are split across two devices, the handoff between the border leaf and WAN PE provides a clean administrative and operational boundary. That boundary is useful for security policy, QoS marking, traffic classification, and troubleshooting ownership. The WAN does not need direct reachability to every leaf and route reflector as in a gateway-less model. The WAN PE also does not peer directly with the data center route reflector in a decoupled model; route exchange occurs through the border-leaf/WAN-PE handoff. VXLAN tunnels between leaf routers across different data centers are characteristic of gateway-less extension, not decoupled gateway operation. Therefore, the statement about clear demarcation between the data center border leaf and WAN PE is the accurate description. Reference: decoupled gateway-based DCI, security/QoS demarcation, WAN PE separation.

================

Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:

When Host-1 sends its first Ethernet frame into MAC VRF-1, Leaf-1 performs normal local data-plane MAC learning on the access interface and installs Host-1's MAC address into the MAC forwarding table. In an L2 EVPN MAC-VRF, host MAC reachability is then advertised into the EVPN control plane using EVPN route type 2, the MAC/IP Advertisement route. Route type 5 is not used for host MAC advertisement; RT-5 is used for IP prefix advertisement in Layer 3 EVPN services. Therefore, option B is false because it incorrectly states that Leaf-1 generates an EVPN RT-5 update with the host MAC address. In this topology, Leaf-1 sends the correct EVPN update to the route reflector, Spine-1. The route reflector then reflects the update to Leaf-2 and Leaf-3, and those remote leaves import the route if the route target matches their MAC VRF-1 import policy. The route target controls service membership, ensuring that only PEs participating in the same EVPN instance import the MAC route. Reference: L2 EVPN MAC learning, RT-2 MAC/IP advertisement, route-reflector distribution, route-target import.

================