Internet breakout is available from a shared edge VRF. How should municipal tenant instances receive a default route?
Select an answer to reveal the explanation.
Short Explanation
Not every agency should get the same Internet door key on day one. Import the shared default only where policy says so—Parks maybe yes, an air-gapped evidence VRF maybe never. Blanket IGP redistribution of Internet routes is a fabric-wide headache.
Full Explanation
Controlled extranet/shared-edge patterns import default or shared routes into tenant instances selectively via RT/policy—not by making every leaf an Internet eBGP speaker, dumping Internet into the underlay IGP, or flooding defaults at L2. Per-tenant policy decides who receives Internet reachability while preserving isolation for tenants that must remain offline.