Exactprep JN0-281 Questions

The configuration defines a static route for 192.168.1.0/24 with a primary next hop of 10.20.20.254 and a qualified-next-hop of 10.20.20.253 with preference 25. In Junos, qualified next hop is used to create preference-ranked redundancy for a static route, typically primary and backup forwarding. The key behavior is that the best, lowest preference path is selected as active. For static routes, the default preference for the route and its primary next hop is lower than 25 unless you explicitly raise it. Because the qualified-next-hop is configured with preference 25, it is less preferred than the primary next hop, so 10.20.20.254 remains the selected next hop during normal operation.

This is not load balancing. Junos does not automatically install both next hops for forwarding simply because more than one next hop is configured when one is qualified with a higher preference. Instead, the qualified next hop is held in reserve and is used only when the primary next hop becomes unusable, such as when it is no longer resolvable or the associated forwarding condition fails. Therefore, the route is expected to be installed and active using 10.20.20.254 under normal conditions, with 10.20.20.253 acting as a backup path.

The BGP session in the exhibit shows the state as Connect, which indicates that the TCP session between the BGP peers has not been fully established.

Step-by-Step Breakdown:

BGP State "Connect":

The Connect state is the second stage in the BGP finite state machine (FSM). At this stage, BGP is trying to establish a TCP session with the peer, but the session has not yet been successfully established.

A successful TCP three-way handshake (SYN, SYN-ACK, ACK) is required before BGP can progress to the OpenSent state, where the peers exchange BGP Open messages.

Possible Causes:

A firewall blocking TCP port 179.

Incorrect IP addresses or network connectivity issues between the BGP peers.

Juniper Reference:

BGP Troubleshooting: In Junos, if a BGP session is stuck in the Connect state, the issue is likely due to a failure in establishing the underlying TCP connection.

On Junos Ethernet switching, access and trunk ports serve different purposes and therefore treat VLAN tags differently by default. An access port is intended for a single VLAN and is designed to connect to endpoints that do not tag their frames. Because of that, access ports forward traffic as untagged on the wire and internally associate those untagged frames to the configured access VLAN. This makes access ports the standard choice for single-VLAN server NICs, management devices, and any endpoint expecting a plain Ethernet connection.

A trunk port is intended to carry traffic for multiple VLANs over a single link, which is typical for switch-to-switch uplinks, leaf-to-spine connectivity where VLAN services are extended, and hosts or appliances that use VLAN tagging. By default, trunk ports forward tagged traffic and require VLAN tags to identify the VLAN membership of each frame. Untagged behavior on a trunk is not assumed by default and is typically governed by configuring a native VLAN or equivalent untagged VLAN handling, depending on platform and design. Without such configuration, untagged frames are not treated as a normal expected case for a trunk link in data center fabrics.

Therefore, the correct default statements are that access ports forward untagged traffic and trunk ports forward tagged traffic, matching options B and D.

On Junos-based Ethernet switching platforms used in data centers, Layer 2 forwarding is handled primarily in the forwarding plane. When a switch receives a frame, it first performs source MAC learning. If the source MAC address is not already present in the Ethernet switching table for that VLAN or bridge domain, the switch creates a new entry that maps the source MAC to the ingress interface and the associated VLAN context. This learning step is fundamental to building the MAC table dynamically and enables efficient forwarding for subsequent frames destined back to that source.

Next, the switch attempts to forward the frame based on the destination MAC lookup in the same VLAN or bridge domain. Because the destination MAC is also not in the Ethernet switching table, the frame is treated as an unknown unicast. The default behavior for unknown unicast in a Layer 2 broadcast domain is to flood the frame out all other interfaces that belong to that VLAN or bridge domain, excluding the ingress interface. Flooding ensures the frame has the best chance of reaching the correct destination host. When the destination responds, the switch then learns that MAC address as a source on the return traffic, allowing future traffic to be forwarded as known unicast instead of flooded.

The switch does not drop the frame by default, and it does not forward the frame to the Routing Engine because this is normal Layer 2 bridging behavior, not a control-plane routing decision.