📝 Section Review: MPLS & VPNs
اہم نکاتKey TakeawaysKey Takeaways
- VRF ہر customer کو الگ routing table دیتا ہے؛ RD/RT prefixes کو الگ اور share کرتے ہیں۔VRF har customer ko alag routing table deta hai; RD/RT prefixes ko alag aur share karte hain.VRF gives each customer an isolated routing table; RD/RT separate and share prefixes.
- P روٹر صرف label-switch کرتا ہے — کور میں VRF یا BGP کی ضرورت نہیں۔P router sirf label-switch karta hai — core mein VRF ya BGP ki zaroorat nahi.The P router label-switches only — no VRF or BGP needed in the core.
- DMVPN: mGRE + NHRP + IPsec؛ redundancy کے لیے dual-hub؛ scalable spoke-to-spoke کے لیے Phase 3۔DMVPN: mGRE + NHRP + IPsec; redundancy ke liye dual-hub; scalable spoke-to-spoke ke liye Phase 3.DMVPN: mGRE + NHRP + IPsec; dual-hub for redundancy; Phase 3 for scalable spoke-to-spoke.
- FlexVPN جدید IKEv2-based successor ہے — اس کے keyring/profile/policy blocks معلوم ہونے چاہئیں۔FlexVPN modern IKEv2-based successor hai — is ke keyring/profile/policy blocks maloom hone chahiyein.FlexVPN is the modern IKEv2-based successor — know its keyring/profile/policy building blocks.
خود جانچ (مشق)Self-Check (Practice)Self-Check (Practice)
یہ مشقی سوالات ہیں، امتحانی سوالات نہیں۔These are practice questions, not exam questions.These are practice questions, not exam questions.
❓ RD اور RT کا کردار سمجھائیں۔RD aur RT ka kirdar samjhayein.Explain the roles of RD and RT.
RD ہر VPNv4 prefix کو منفرد بناتا ہے (overlapping customer IPs کی اجازت)۔ RT کنٹرول کرتا ہے کون سی VRF کون سے routes import/export کرے۔RD har VPNv4 prefix ko unique banata hai (overlapping customer IPs ki ijazat). RT control karta hai kaun si VRF kaun se routes import/export kare.RD makes each VPNv4 prefix unique (allows overlapping customer IPs). RT controls which VRF imports/exports which routes.
❓ دوسرے PE پر VPNv4 prefixes غائب ہیں — کیا چیک کریں گے؟Doosre PE par VPNv4 prefixes ghaib hain — kya check karenge?VPNv4 prefixes missing on the remote PE — what do you check?
چیک کریں: address-family vpnv4 میں neighbor activated، send-community extended لگا، VRF address-family میں routes redistributed۔Check karein: address-family vpnv4 mein neighbor activated, send-community extended laga, VRF address-family mein routes redistributed.Check: neighbor activated under address-family vpnv4, send-community extended set, routes redistributed under the VRF address-family.
❓ DMVPN Phase 2 vs Phase 3؟DMVPN Phase 2 vs Phase 3?DMVPN Phase 2 vs Phase 3?
Phase 2 میں spokes براہ راست tunnel بناتے ہیں لیکن hub سے گزرتے ہیں؛ Phase 3 NHRP redirect/shortcut سے بہترین spoke-to-spoke راستہ دیتا ہے۔Phase 2 mein spokes direct tunnel banate hain lekin hub se guzarte hain; Phase 3 NHRP redirect/shortcut se behtareen spoke-to-spoke rasta deta hai.Phase 2 spokes tunnel directly but routing still goes via the hub; Phase 3 uses NHRP redirect/shortcut for optimal spoke-to-spoke paths.
❓ FlexVPN DMVPN سے upgrade کیوں سمجھا جاتا ہے؟FlexVPN DMVPN se upgrade kyun samjha jata hai?Why is FlexVPN considered an upgrade over DMVPN?
IKEv2 پر مبنی، site-to-site اور remote-access کے لیے ایک ہی framework، اور صاف modular policies۔IKEv2 par based, site-to-site aur remote-access ke liye ek hi framework, aur saaf modular policies.IKEv2-based, one framework for site-to-site and remote-access, and cleaner modular policies.