Public-works and parks departments share a Spectrum fabric. What should engineers verify about VRF behavior by default?
Select an answer to reveal the explanation.
Short Explanation
You shouldn't assume route targets or underlay VTEP reachability quietly punch holes between departments. BGP-EVPN keeps public-works and parks isolated by default — routes only leak if someone explicitly configures it that way.
Full Explanation
When public-works and parks departments share a Spectrum fabric, engineers must understand default VRF behavior under BGP-EVPN multi-tenancy. By default, BGP-EVPN tenants do not leak routes between VRFs unless explicitly allowed. Isolation is the intended steady state: each department’s AI Ethernet overlay keeps its own prefixes, and cross-VRF import happens only when operators configure route targets or policies that permit it. That default protects municipal agencies that share Spectrum leaf/spine hardware without sharing routing tables.
Assuming tenant VRFs import EVPN Type-2 host routes from peer VRFs for faster convergence fails by concept—Type-2 host routes remain isolated within their originating VRF unless an explicit import policy allows cross-VRF leakage. Assuming inter-VRF route targets are programmed on leaf switches to allow limited sharing likewise fails; route targets that permit sharing are an explicit configuration, not the default behavior of the fabric. Assuming public-works and parks VRFs forward toward peer subnets through the underlay VTEP also fails; underlay VTEP reachability does not defeat VRF isolation, and forwarding between departments still requires an explicit leak or import policy.
Exam caveat: “no leak unless allowed” is the design principle; automation templates, shared RT values, or interlocking import policies can still create unintended imports if operators are careless. Operational check: list RT import/export for public-works and parks VRFs, confirm neither imports the other’s tenant routes unless a documented exception exists, and re-check after any EVPN policy push so Spectrum-X civic isolation remains intentional and auditable.