Free Juniper JN0-664 Practice Exam with Questions & Answers | Set: 2

EVPN is a technology that connects L2 network segments separated by an L3 network using a virtual Layer 2 network overlay over the Layer 3 network. EVPN uses BGP as its control protocol to exchange different types of routes for different purposes. Type 2 routes are used to advertise MAC address and IP address pairs learned using ARP snooping from the local CE devices. Type 3 routes are used to join a multicast tree to flood traffic such as broadcast, unknown unicast, and multicast (BUM) traffic.

Option A (Correct):

Complete Sequence Number PDUs (CSNPs) are periodically flooded by the Designated Intermediate System (DIS) on multi-access networks (e.g., Ethernet).

This ensures all routers on the segment synchronize their Link-State Databases (LSDBs).

In the provided exhibit, the configuration involves using a RIB (Routing Information Base) group to facilitate internet access for VPN-A Site 1 through PE-1. The goal is to provide VRF Internet access over a single connection.

1. **Understanding RIB Groups**:

- RIB groups allow for the import and export of routes between different routing tables.

- In this scenario, we have two RIBs: `inet.0` (the main routing table) and `VPN-A.inet.0` (the VRF-specific routing table).

2. **Statement Analysis**:

- **A. You must use the RIB group to move a default route, which is learned through BGP, from the inet.0 table to the VPN-A.inet.0 table.**

- Correct. To provide Internet access to VPN-A, the default route (0.0.0.0/0) learned via BGP in the `inet.0` table must be made available in the `VPN-A.inet.0` table. This is done using the RIB group to import the default route.

- **B. You do not need to use the RIB group to move interface routes from the inet.0 table to the VPN-A.inet.0 table.**

- Correct. Interface routes (connected routes) are typically directly added to both the global and the VRF routing tables without needing a RIB group. These routes are known to the VRF because the interfaces are part of the VRF configuration.

- **C. You do not need to use the RIB group default route, which is learned through BGP, from the inet.0 table to the VPN-A.inet.0 table.**

- Incorrect. As discussed, the default route needs to be imported into the VRF's routing table using a RIB group to enable Internet access for the VRF.

- **D. You must use the RIB group to move interface routes from the inet.0 table to the VPN-A.inet.0 table.**

- Incorrect. Interface routes are directly associated with the VRF interfaces and are automatically known to the VRF routing table. There is no need to use a RIB group for these routes.

**Conclusion**:

The correct answers are:

**A. You must use the RIB group to move a default route, which is learned through BGP, from the inet.0 table to the VPN-A.inet.0 table.**

**B. You do not need to use the RIB group to move interface routes from the inet.0 table to the VPN-A.inet.0 table.**

**References**:

- Juniper Networks Documentation on RIB Groups: [RIB Groups Overview](https://www.juniper.net/documentation/en_US/junos/topics/concept/rib-groups-overview.html)

- Junos OS VPNs Configuration Guide: [Junos VPNs Configuration](https://www.juniper.net/documentation/en_US/junos/topics/concept/vpns-overview.html)

Understanding the Problem in MPLS CoS Classification

How EXP Bits Are Used for CoS in MPLS

Traffic is sent from VPN-A Site-1 → CE-1 → PE-1 → P-1 → PE-2 → CE-2.

The MPLS LSP (Label Switched Path) from PE-1 to PE-2 is expected to carry MPLS EXP bits, which are used for Class of Service (CoS) classification.

PE-2 should classify traffic based on EXP bits received in the MPLS label.

What Happens with PHP (Penultimate Hop Popping)?

By default, the penultimate router (P-1) pops the top MPLS label before sending the packet to PE-2.

Since the EXP bits are in the top MPLS label, they get removed along with the label.

This means that PE-2 no longer sees the correct EXP bits, leading to incorrect traffic classification.

Solution: Configure Explicit-Null on PE-2

Explicit Null (explicit-null) must be configured on PE-2 to ensure that P-1 does NOT remove the MPLS label.

Instead of removing the label, P-1 will send a label of 0 (for IPv4) or 2 (for IPv6) to PE-2.

This preserves the MPLS EXP bits, allowing PE-2 to classify the traffic correctly.

Evaluating the Answer Choices Again

✅ B. Configure the explicit-null statement on PE-2.

Correct, because:

PE-2 is the egress LSR, where Ultimate Hop Popping (UHP) must be enabled.

Configuring explicit-null ensures that P-1 does not remove the label, preserving the EXP bits for CoS classification at PE-2.

Configuration on PE-2:

set protocols mpls explicit-null

Juniper Documentation Reference:

"Explicit-null must be configured on the egress LSR to prevent PHP from removing the top MPLS label, thereby preserving the EXP bits."

❌ A. Configure the explicit-null statement on PE-1.

Incorrect, because:

Explicit-null must be configured on the egress LSR (PE-2), not the ingress LSR (PE-1).

PE-1 only labels the traffic but does not control PHP behavior on P-1.

❌ C. Configure VPN prefix mapping for the PE-1_to_PE-2 LSP.

Incorrect, because:

VPN prefix mapping is used for mapping VPN routes to LSPs but does not solve the EXP bit issue.

The problem here is label removal (PHP), not route mapping.

❌ D. Set a static CoS value for the PE-1_to-PE-2 LSP.

Incorrect, because:

This does not preserve the original EXP bits, it only applies a static CoS value.

It’s a workaround, not a fix.

Final Answer: ✅ B. Configure the explicit-null statement on PE-2.

Key Takeaways

Penultimate Hop Popping (PHP) removes the outer MPLS label at P-1, which also removes the EXP bits used for CoS classification.

To keep EXP bits intact, configure explicit-null on the egress PE (PE-2).

This forces P-1 to send a label (0 for IPv4, 2 for IPv6) to PE-2, preserving the EXP bits for CoS classification.

Official Juniper Documentation Reference

???? Juniper MPLS CoS and PHP Behavior Guide

"To retain CoS EXP bits at the egress LSR, configure explicit-null on the egress PE. This prevents PHP from stripping the MPLS label before reaching the final PE router."

https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/command/show-route-advertising-protocol.html