Security asks that DCI EVPN signaling for the municipal interconnect run in a dedicated routing instance rather than sharing the production tenant instance casually. What design hygiene does that request reflect?
Select an answer to reveal the explanation.
Short Explanation
Giving DCI its own routing instance is like putting the interconnect radio room on a separate floor—cleaner blast radius and clearer policy. Separation keeps signaling and import/export hygiene intentional. It does not delete the need for RTs or VTEPs; it organizes them.
Full Explanation
Using dedicated routing instances for DCI EVPN (or carefully scoped instances) is a control-plane separation practice that clarifies policy and reduces accidental tenant leakage. It does not require a single global instance, and security-oriented instances can carry appropriate BGP families when designed to. Isolation also does not eliminate RT or VTEP requirements.