Pass the Juniper JNCIS-ENT JN0-351 Questions and answers with ValidTests

A  is correct because you can deploy only stateless firewall filters on an EX Series switch.  A stateless firewall filter is a filter that evaluates each packet individually based on the header information, such as source and destination addresses, protocol, and port numbers 1 .  A stateless firewall filter does not keep track of the state or context of a packet flow, such as the sequence number, flags, or session information 1 .  EX Series switches support only stateless firewall filters, which are also called access control lists (ACLs) or packet filters 2 .

C  is correct because you can apply firewall filters to both Layer 2 and Layer 3 traffic on an EX Series switch.  Layer 2 traffic is traffic that is switched within a VLAN or a bridge domain, while Layer 3 traffic is traffic that is routed between VLANs or networks 3 .  EX Series switches support three types of firewall filters: port (Layer 2) firewall filters, VLAN firewall filters, and router (Layer 3) firewall filters 4 . You can apply these filters to different interfaces and directions to control the traffic entering or exiting the switch.

IS-IS (Intermediate System to Intermediate System) is a routing protocol that is designed to move information efficiently within a computer network 1 2 .  It supports multiple protocol topologies, including IPv4, IPv6, and multicast 1 2 . Therefore, options C, E, and D are correct.

 References:

Enterprise Routing and Switching, Specialist (JNCIS-ENT) - Juniper Networks

Enterprise Routing and Switching, Specialist (JNCIS-ENT) - Juniper Networks

Juniper Networks Certified Specialist, Enterprise Routing & Switching …

Juniper Networks Certified Specialist, Enterprise Routing & Switching …

[Configuring Layer 2 Firewall Filters - TechLibrary - Juniper Networks]

[Understanding Firewall Filter Terms - TechLibrary - Juniper Networks]

The bridging table is a data structure that stores the MAC addresses and the associated interface details and MAC learned time for each MAC address. The bridging table is used by the switch to forward frames based on the destination MAC address. The ether type details and the preamble of Ethernet packet are not stored in the bridging table, as they are not relevant for the switching process. References:

Enterprise Routing and Switching, Specialist (JNCIS-ENT) - Juniper Networks

Enterprise Routing and Switching, Specialist (JNCIS-ENT) - Juniper Networks

[Junos OS Layer 2 Configuration Guide - TechLibrary - Juniper Networks]

[Junos OS Layer 2 Configuration Guide - TechLibrary - Juniper Networks]

A  is correct because you need to configure BGP multihop to enable redundancy for the EBGP peering between the two routers.  BGP multihop is a feature that allows BGP peers to establish a session over multiple hops, instead of requiring them to be directly connected 1 .  By default, EBGP peers use a time-to-live (TTL) value of 1 for their packets, which means that they can only reach adjacent neighbors 1 .  However, if you configure BGP multihop with a higher TTL value, you can allow EBGP peers to communicate over multiple routers in between 1 . This can provide redundancy in case of a link failure or a router failure between the EBGP peers.

B  is correct because you need to configure loopback interface peering to enable redundancy for the EBGP peering between the two routers.  Loopback interface peering is a technique that uses loopback interfaces as the source and destination addresses for BGP sessions, instead of physical interfaces 2 .  Loopback interfaces are virtual interfaces that are always up and reachable as long as the router is operational 2 .  By using loopback interface peering, you can avoid the dependency on a single physical interface or link for the BGP session, and use multiple paths to reach the loopback address of the peer 2 . This can provide redundancy and load balancing for the EBGP peering.

C  is correct because you need to configure routes for the peer loopback interface IP addresses to enable redundancy for the EBGP peering between the two routers.  Routes for the peer loopback interface IP addresses are necessary to ensure that the routers can reach each other’s loopback addresses over multiple hops 2 .  You can use static routes or dynamic routing protocols to advertise and learn the routes for the peer loopback interface IP addresses 2 . Without these routes, the routers will not be able to establish or maintain the BGP session using their loopback interfaces.

Redundant Trunk Groups (RTGs) on EX Series switches provide a simple solution for network recovery when a trunk port on a switch goes down 1 .  They are configured on the access switch and contain two links: a primary or active link, and a secondary link 1 .  Therefore, option B is correct because if the active link fails, the secondary link automatically starts forwarding data traffic without waiting for normal spanning-tree protocol convergence 1 .

Option D is also correct.  In a typical enterprise network composed of distribution and access layers, RTGs are used where one Access switch is connected to two different uplink switches 2 .  This implies that RTGs must be connected to the same aggregation switch 2 .

The solution that should be implemented in this scenario is to create a default generate route that includes an import policy to match BGP routes from ISP1 and assign a preference value of four or less. This way, the default route will be advertised to the internal OSPF neighbors only when there is a BGP route from ISP1 in the routing table, and it will have a higher preference than any other default route from ISP2 or ISP3. If ISP1 is not available, the default generate route will be withdrawn and the traffic will use the next available default route from ISP2 or ISP3.

Option A is incorrect because creating a default static route with ISP1’s address as the next hop while specifying the addresses for ISP2 and ISP3 as qualified next hops with a preference value of six or higher will not ensure that the default route is advertised to the internal OSPF neighbors only when ISP1 is available. The default static route will always be in the routing table regardless of the availability of ISP1, and it will have a lower preference than any other default route from ISP2 or ISP3.

Option C is incorrect because creating a default static route with each neighbor address as the next hop will not ensure that all traffic uses ISP1 as the primary connection and only uses ISP2 and ISP3 when ISP1 is not available. The default static route will always be in the routing table regardless of the availability of ISP1, and it will load balance the traffic among the three ISPs.

Option D is incorrect because creating a default aggregated route will not ensure that the default route is advertised to the internal OSPF neighbors only when ISP1 is available. The default aggregated route will always be in the routing table regardless of the availability of ISP1, and it will not have any preference value associated with it. References:

Enterprise Routing and Switching, Specialist (JNCIS-ENT) - Juniper Networks

Enterprise Routing and Switching, Specialist (JNCIS-ENT) - Juniper Networks

The output shown in the exhibit is a brief display of the Ethernet switching table, which shows the learned Layer 2 MAC addresses for each VLAN and interface 1 .

The command  show ethernet-switching table  displays the Ethernet switching table with brief information, such as the destination MAC address, the VLAN name, the forwarding state, and the interface name 1 .

The command  show route forwarding-table  displays the routing table information for each protocol family, such as inet, inet6, mpls, iso, and so on 2 . It does not show the Ethernet switching table or the MAC addresses.

The command  show ethernet-switching table extensive  displays the Ethernet switching table with extensive information, such as the destination MAC address, the VLAN name, the forwarding state, the interface name, the VLAN index, and the tag type 1 . It shows more details than the brief output shown in the exhibit.

The command  show route forwarding-table family ethernet-switching  displays the routing table information for the ethernet-switching protocol family, which shows the destination MAC address, the next-hop MAC address, and the interface name 3 . It does not show the VLAN name or the forwarding state.

The maximum allowable MTU size for a default GRE tunnel without IPv4 traffic fragmentation is 1476 bytes 1 .  This is because GRE packets are formed by the addition of the original packets and the required GRE headers 1 .  These headers are 24-bytes in length and since these headers are added to the original frame, depending on the original size of the packet we may run into IP MTU problems 1 .  The most common IP MTU is 1500-bytes in length (Ethernet) 1 .  When the tunnel is created, it deducts the 24-bytes it needs to encapsulate the passenger protocols and that is the IP MTU it will use 1 .  For example, if we are forming a tunnel over FastEthernet (IP MTU 1500) the IOS calculates the IP MTU on the tunnel as: 1500-bytes from Ethernet - 24-bytes for the GRE encapsulation = 1476-Bytes 1 .