A city still maintains per-agency VRFs and VNIs while introducing GBP for finer controls inside some overlays. What layered-isolation principle applies?
Select an answer to reveal the explanation.
Short Explanation
Think castle walls (VRF/VNI) plus room keys (GBP). You keep the outer walls for agencies and add interior keys for app tiers. Turning on badges does not mean bulldozing the castle.
Full Explanation
Tenant isolation with routing instances and VNIs remains a foundational multitenancy tool. GBP adds microsegmentation within or across those overlays. Designs commonly layer both: VRFs/VNIs separate tenants or major domains, while GBP refines east-west policy. GBP does not mandate removing routing instances, nor does a single tag obsolete VNIs or forbid coexistence.