Question 350
A fictional service-provider team at Elmbridge Networks is reviewing a redundant core router pair. The finding is: An engineer expects a VLAN created in a virtual-switch instance to be usable by ports in another switching instance without assignment. Which ongoing control would most directly detect or prevent the same failure from recurring?
Explanation
Correct Answer
Compare instance membership, VLAN mappings, and MAC tables for cross-tenant isolation at each deployment. This monitors the behavior that failed at Elmbridge Networks; the most useful acceptance signal is that the same VLAN numbers can exist where supported without unintended MAC or broadcast leakage across isolated virtual switches.
Incorrect Answers
Include tagged and untagged frame tests in trunk turn-up and template drift checks. The monitored boundary differs from virtual-switch instance isolation, so the original weakness might reappear unnoticed. Virtual-switch routing instances provide separate bridge contexts; similar VLAN identifiers alone do not imply shared L2 forwarding.
The control protects MAC address learning and moves. It does not establish the ongoing virtual-switch instance isolation behavior required in this network. Virtual-switch routing instances provide separate bridge contexts; similar VLAN identifiers alone do not imply shared L2 forwarding.
Validate supported metric style, actual LSP metric values, and computed paths during topology expansion. That ongoing check is for IS-IS wide metrics; it would not reliably detect recurrence of virtual-switch instance isolation. Virtual-switch routing instances provide separate bridge contexts; similar VLAN identifiers alone do not imply shared L2 forwarding.