Question

A service provider hosts a shared services VRF (SHARED) containing a DNS/NTP server at 10.100.100.10. Two customer VRFs (CUST_A and CUST_B) must reach this server, but CUST_A and CUST_B must NOT reach each other. The SHARED VRF uses RD 65000:100. On the PE, you configure route-target import/export values so the shared route is imported into both customer VRFs. Which route-target configuration on the SHARED, CUST_A, and CUST_B VRFs achieves reachability to the server while keeping the two customers isolated?

Accepted Answer

SHARED exports RT 65000:100 and imports 65000:1 and 65000:2; CUST_A exports 65000:1 and imports 65000:1 and 65000:100; CUST_B exports 65000:2 and imports 65000:2 and 65000:100

Answer

All three VRFs export and import the single RT 65000:100 so every VRF shares one common route target

Answer

SHARED, CUST_A, and CUST_B each export and import both 65000:1 and 65000:2 to guarantee the server is reachable from all sites

Answer

CUST_A and CUST_B export 65000:100 and import 65000:100; SHARED imports and exports only its own RD-derived RT 65000:100