On a Juniper EVPN-VXLAN municipal leaf, how are Layer 2 and Layer 3…

Question

On a Juniper EVPN-VXLAN municipal leaf, how are Layer 2 and Layer 3 tenant isolation mechanisms typically mapped?

Accepted Answer

L2 isolation maps to separate VNIs or bridge-domains; L3 isolation maps to routing instances or VRFs — L2 isolation is about separate broadcast rooms (VNIs/bridge-domains). L3 isolation is about separate map books (routing instances/VRFs). Loopbacks and CoS are useful, but they are not the tenant-isolation map you draw for JN0-683.

Answer

L2 isolation uses only firewall filters; L3 isolation uses only CoS schedulers

Answer

Both L2 and L3 isolation are completed solely by unique underlay loopback addresses

Answer

L2 isolation requires identical VNIs for every tenant while L3 uses a shared VRF

On a Juniper EVPN-VXLAN municipal leaf, how are Layer 2 and Layer 3 tenant isolation mechanisms typically mapped?

Short Explanation

Full Explanation