Municipal operators need leaf management reachability without exposing tenant VRFs. Which separation practice is most appropriate?
Select an answer to reveal the explanation.
Short Explanation
Management is staff-only stairs; tenants get public elevators. Do not pour SSH and telemetry into every agency VRF or haul tenant defaults into the management plane. Keep mgmt/underlay apart from tenant instances so a tenant outage is not a lockout—or a backdoor.
Full Explanation
Operational multitenancy includes plane separation: management and underlay routing should remain distinct from tenant VRFs. Exposing management into tenant contexts, leaking tenant defaults into management, or relying solely on tenant data ports for device access creates availability and security risks. Maintain dedicated management reachability alongside isolated tenant instances.