📝 Section Review: MPLS & VPNs
اہم نکاتKey TakeawaysKey Takeaways
- MPLS labels core راؤٹرز کو پورا IP header پڑھے بغیر forward کرنے دیتے ہیں — LDP labels بانٹتا ہے۔MPLS labels core routers ko poora IP header parhe baghair forward karne dete hain — LDP labels bant-ta hai.MPLS labels let core routers forward without reading the full IP header — LDP distributes the labels.
- VRF = ایک راؤٹر پر الگ routing tables؛ RD = منفرد پن؛ RT = کون سی VRF کو راستہ ملے۔VRF = ek router par alag routing tables; RD = munfarid pan; RT = kaun si VRF ko rasta mile.VRF = separate routing tables on one router; RD = uniqueness; RT = which VRF gets the route.
- DMVPN phases: hub-only → routing سے direct → NHRP redirect سے direct (بہترین)۔DMVPN phases: hub-only → routing se direct → NHRP redirect se direct (behtreen).DMVPN phases: hub-only → direct with routing → direct with NHRP redirect (best).
- Production DMVPN tunnels کبھی بغیر encryption کے نہ چلائیں — ہمیشہ IPsec لگائیں۔Production DMVPN tunnels kabhi baghair encryption ke na chalayein — hamesha IPsec lagayein.Never run production DMVPN tunnels unencrypted — always add IPsec.
- FlexVPN IKEv2 پر مبنی جدید متبادل ہے جو site-to-site اور remote-access VPN کو یکجا کرتا ہے۔FlexVPN IKEv2 par mabni jadeed mutbadil hai jo site-to-site aur remote-access VPN ko yakja karta hai.FlexVPN is the IKEv2-based modern alternative unifying site-to-site and remote-access VPN.
خود جانچ (مشق)Self-Check (Practice)Self-Check (Practice)
یہ مشقی سوالات ہیں، امتحانی سوالات نہیں۔These are practice questions, not exam questions.These are practice questions, not exam questions.
❓ RD اور RT میں کیا فرق ہے؟RD aur RT mein kya farq hai?What is the difference between RD and RT?
RD prefix کو MP-BGP میں منفرد بناتا ہے؛ RT طے کرتا ہے کہ کون سی VRF route import کرے (policy)۔RD prefix ko MP-BGP mein munfarid banata hai; RT tay karta hai ke kaun si VRF route import kare (policy).RD makes the prefix unique in MP-BGP; RT controls which VRF imports the route (policy).
❓ ہر DMVPN phase میں spoke-to-spoke ٹریفک کیسے جاتا ہے؟Har DMVPN phase mein spoke-to-spoke traffic kaise jata hai?How does spoke-to-spoke traffic flow in each DMVPN phase?
Phase 1: hub سے۔ Phase 2: براہ راست tunnels (spokes routing سے subnets جانتے ہیں)۔ Phase 3: NHRP redirect + shortcut switching۔Phase 1: hub se. Phase 2: braah-e-raast tunnels (spokes routing se subnets jante hain). Phase 3: NHRP redirect + shortcut switching.Phase 1: via hub. Phase 2: direct tunnels (spokes know subnets via routing). Phase 3: NHRP redirect + shortcut switching.
❓ Spoke DMVPN hub کے ساتھ register نہیں ہو رہا — کیا چیک کریں گے؟Spoke DMVPN hub ke saath register nahi ho raha — kya check karenge?A spoke won't register with the DMVPN hub — what do you check?
NHRP network-ID، authentication، اور hub کی طرف NHS/map درست ہونے چاہئیں؛ underlay کام کرنا چاہیے۔NHRP network-ID, authentication, aur hub ki taraf NHS/map durust hone chahiye; underlay kaam karna chahiye.NHRP network-ID, authentication, and NHS/map pointing to the hub must match; underlay must work.
❓ FlexVPN ایک لائن میں کیا ہے؟FlexVPN ek line mein kya hai?What is FlexVPN in one line?
IKEv2 پر مبنی متحد VPN فریم ورک — site-to-site، remote-access اور spoke-to-spoke کے لیے؛ DMVPN سے نیا اور آسان۔IKEv2 par mabni muttahid VPN framework — site-to-site, remote-access aur spoke-to-spoke ke liye; DMVPN se naya aur aasan.IKEv2-based unified VPN framework for site-to-site, remote-access, and spoke-to-spoke — newer and simpler than DMVPN.