Question

A service provider offers a shared central-services VRF (hosting DNS and NTP servers) that all customer VRFs must reach, but individual customers must NOT be able to reach each other through the central-services VRF. Customer VRFs use RT 65000:100 (customer A) and 65000:200 (customer B). The central-services VRF uses RT 65000:999. Which route-target configuration on the central-services PE VRF achieves the required any-to-central but not customer-to-customer reachability?

Accepted Answer

Central-services VRF imports 65000:100 and 65000:200 and exports 65000:999; each customer VRF imports 65000:999 and exports its own customer RT

Answer

Central-services VRF imports and exports 65000:999 only; each customer VRF imports and exports 65000:999

Answer

Central-services VRF exports 65000:100 and 65000:200 and imports 65000:999; each customer VRF exports 65000:999 and imports its own customer RT

Answer

All VRFs import and export 65000:100, 65000:200, and 65000:999 to guarantee full reachability