Juniper JN0-664 Exam With Confidence Using Practice Dumps

In the exhibit, we see two VRF (Virtual Routing and Forwarding) instances, CE-1 and CE-2, configured on a Juniper router. Each VRF is associated with a route-distinguisher (RD) and a vrf-target value.

Understanding the Role of vrf-target

The vrf-target is used to define Route Targets (RT), which control the import and export of VPN routes in MPLS Layer 3 VPNs (L3VPNs).

If two VRFs share the same RT, they will import each other's routes, allowing communication between them.

In this case, both VRFs have the same vrf-target:

vrf-target target:65512:100;

Since both CE-1 and CE-2 have the same RT (65512:100), they will import and export each other’s routes, enabling route sharing between them.

Understanding route-distinguisher (RD)

The RD (Route Distinguisher) only ensures uniqueness of overlapping IP prefixes within the MPLS network.

It does not control route sharing between VRFs.

In the exhibit, both VRFs have the same RD (65512:1), but this does not influence whether they share routes.

Correct Answer Selection

A (Correct): The vrf-target configuration enables route sharing between CE-1 and CE-2 since they have the same RT (65512:100).

B (Incorrect): The vrf-target does the opposite—it allows sharing, not blocking.

C (Incorrect): The route-distinguisher only provides unique route identification, but does not affect route sharing.

D (Incorrect): Again, route-distinguisher has no impact on route sharing.

Reference from Juniper Official Documentation

✅ Juniper Documentation - Junos MPLS VPNs Configuration Guide:

"Route targets (vrf-target) are used to control the import and export of VPN routes between different VRFs. VRFs with the same route target can import and export routes to each other, enabling inter-VRF communication."

Thus, the correct answer is:

✅ A. The vrf-target configuration will allow routes to be shared between CE-1 and CE-2.

The exhibit shows the configuration of a VRF (Virtual Routing and Forwarding) instance on a Juniper PE router. Let's break down the key components:

VRF Configuration (VPN-A)

The instance type is VRF, meaning this is an L3VPN (Layer 3 VPN).

The routing instance contains a static route (10.1.0.0/16 next-hop 10.1.0.1).

The interface ge-0/0/2.0 is assigned to the VRF.

Route Distinguisher (RD): 172.17.20.1:1

VRF-Export Policy: vpn-a-export

VRF-Target: target:65512:1 (This defines which routes will be imported into the VRF).

VRF Export Policy (vpn-a-export)

The vpn-a-export policy adds two BGP communities (route targets) to exported VPN routes:

community add vpn-a-target;

community add vpn-m-target;

accept;

The vpn-a-target community corresponds to target:65512:1.

The vpn-m-target community corresponds to target:65512:2.

Policy-Options (Community Definitions)

community vpn-a-target members target:65512:1;

community vpn-m-target members target:65512:2;

This confirms that routes exported from this VRF will have BOTH target:65512:1 and target:65512:2.

Evaluating the Answer Choices

✅ Option A: "VPN routes are exported with the target:65512:1 and target:65512:2 route targets."

The vpn-a-export policy explicitly adds both vpn-a-target (65512:1) and vpn-m-target (65512:2) to exported routes.

This is correct. ✅

❌ Option B: "You cannot use the vrf-target and vrf-export statements in the same VRF."

This is incorrect.

Juniper allows the use of both vrf-target and vrf-export in the same VRF:

vrf-target is used for importing routes.

vrf-export defines export policies (which can add additional route targets).

This is incorrect. ❌

❌ Option C: "VPN routes with the target:65512:1 and target:65512:2 route targets are imported."

The vrf-target target:65512:1; statement only controls importing routes.

The import policy does not include target:65512:2, so routes tagged with target:65512:2 alone would not be imported into this VRF.

This is incorrect. ❌

❌ Option D: "VPN routes are exported with only the target:65512:1 route target."

The export policy (vpn-a-export) clearly adds both 65512:1 and 65512:2.

This is incorrect. ❌

Final Answer:

✅ A. VPN routes are exported with the target:65512:1 and target:65512:2 route targets.

Verification from Juniper Documentation

Juniper MPLS L3VPN Configuration Guide confirms that vrf-target is used for importing, while vrf-export can be used for exporting multiple route targets.

Juniper Routing Policy Documentation states that export policies can add multiple BGP communities (route targets).

RFC 4364 (BGP/MPLS IP VPNs) defines the use of route targets for VPN route control.

The vrf-target statement is used in routing-instances to define route-target communities for VPN route import and export policies.

vrf-target export → Controls which route targets (RTs) are added to advertised routes (used when sending routes to remote PEs).

vrf-target import → Controls which VPN routes are accepted into the VRF (used when receiving routes from remote PEs).