Juniper JN0-649 Exam With Confidence Using Practice Dumps

To ensure that each host is placed on a separate VLAN when using an unmanaged switch between the hosts and the EX Series switch:

Configure an input firewall filter on interface ge-0/0/3 to match the source MAC or IP address of the hosts to assign the VLANs:

By configuring an input firewall filter, you can match the source MAC or IP address of incoming traffic and assign the appropriate VLAN based on these criteria.

This method ensures that even though the switch between hosts and EX Series is unmanaged, VLAN assignments are still properly enforced at the EX Series switch.

Configuration Example:

set firewall family ethernet-switching filter VLAN-assignment term VLAN100 from source-mac-address xx:xx:xx:xx:xx:xx

set firewall family ethernet-switching filter VLAN-assignment term VLAN100 then vlan-assignment vlan 100

set firewall family ethernet-switching filter VLAN-assignment term VLAN200 from source-mac-address yy:yy:yy:yy:yy:yy

set firewall family ethernet-switching filter VLAN-assignment term VLAN200 then vlan-assignment vlan 200

set firewall family ethernet-switching filter VLAN-assignment term VLAN300 from source-mac-address zz:zz:zz:zz:zz:zz

set firewall family ethernet-switching filter VLAN-assignment term VLAN300 then vlan-assignment vlan 300

set interfaces ge-0/0/3 unit 0 family ethernet-switching filter input VLAN-assignment

References:

The command references from "Useful Juniper Commands.txt" and network configuration guides provide details on firewall filters and VLAN assignments​​.

Step 1: Identify the problem.

Devices do not support VPN NLRI, and you must prevent these devices from receiving BGP VPN routes.

Step 2: Analyze the possible solutions.

Option A: Configure an import policy on the remote peer to reject the routes when they are received.

This approach would require configuration on the remote peer, which might not always be practical or possible.

Option B: Configure an export policy on the local BGP peer to reject the VPN routes being sent to the remote peer.

This ensures the local BGP peer does not send the VPN routes to the remote peer, directly addressing the problem.

Option C: Configure a route reflector for the VPN NLRI.

This does not solve the issue of preventing the advertisement of VPN routes to non-supporting peers.

Option D: Configure the apply-vpn-export feature on the local BGP peer.

This feature ensures that the VPN export policies are applied, preventing the advertisement of VPN routes to peers that do not support VPN NLRI.

Step 3: Verify the configurations.

Option B and Option D directly address the requirement without needing configurations on the remote peer.

References:

Juniper BGP configuration guide on export policies​​​​​​.

Commands for applying export policies:

shell

Copy code

set policy-options policy-statement term from protocol bgp-vpn

set policy-options policy-statement term then reject

set protocols bgp group export

set protocols bgp apply-vpn-export

The leaf node is not configured for the family evpn NLRI (D):

The exhibit shows that there is an unsupported capability NP error for AFI 1, SAFI 70. This indicates that the leaf node is not configured to support the EVPN (Ethernet VPN) address family.

References:

The BGP configuration and troubleshooting details can be found in "Juniper Commands.pdf" and related EVPN configuration documents​​​​.