Nokia VPRN flashcards

32 cards. Read the term and the definition here. The deck at the top of this page is optional.

OSPF LSA Type 5

An External LSA generated by an ASBR that describes routes redistributed into OSPF from another protocol. It is flooded throughout normal areas but blocked in stub and NSSA areas.

BGP local preference

A well-known discretionary attribute used within an AS to prefer one exit path over another. Higher values are preferred and it is evaluated before AS path length in SR OS path selection.

BGP next-hop-self

A neighbor-level command that rewrites the next-hop attribute of routes advertised to an iBGP peer to the local router's address, ensuring the peer can resolve the next hop via IGP.

IS-IS Level 2 router

A router that participates in the IS-IS backbone and carries inter-area prefix and topology information. L1/L2 routers leak L1 routes into L2 and set the attached bit.

BFD multiplier

The number of consecutive missed BFD control packets before the session is declared down. Detection time equals multiplier times the negotiated transmit interval.

Route preference SR OS

A numeric value used to select among routes from different protocols; lower is preferred. Direct is 0, static 5, OSPF internal 10, OSPF external 150, BGP 170.

OSPF virtual link

A logical adjacency tunneled through a transit area that connects a remote area to the backbone. Both endpoints must be ABRs with a common transit area.

802.1Q VLAN ID field

A 12-bit field in the 802.1Q tag that identifies the VLAN, giving a range of 0 to 4095. VLAN 0 is priority-tagged and VLAN 4095 is reserved.

MSTP region

A group of switches sharing the same region name, revision level, and VLAN-to-instance mapping. All members must match exactly to form one region.

LACP active mode

A LAG mode where the port actively sends LACPDUs to negotiate bundling. Both active and passive modes can form a LAG, but active-to-active is the most common.

MC-LAG ICCP

Inter-Chassis Communication Protocol runs over a peer link between two aggregation devices to synchronize LAG and service state for multi-chassis redundancy.

QinQ S-VLAN TPID

The outer service VLAN tag in 802.1ad uses TPID 0x88a8, distinguishing it from the inner customer VLAN tag with TPID 0x8100. This allows stacked VLANs.

VPLS split horizon

A rule that prevents a VPLS PE from forwarding traffic received on one spoke SDP out another spoke SDP, avoiding loops in a hub-and-spoke topology.

EVPN Type 3 route

An Inclusive Multicast Ethernet Tag route used to build the BUM flooding tree in EVPN. It carries the originating VTEP address and the VNI.

Storm control threshold

A per-SAP or per-port limit on broadcast, multicast, or unknown unicast traffic, configured in kilo-packets per second or as a percentage of link bandwidth.

NSP Model-Driven Mediation

The NSP layer that translates between YANG models and device-specific interfaces, enabling multi-vendor and multi-release support through NETCONF, gNMI, or SNMP.

gNMI telemetry subscription

A streaming subscription to a YANG path with a mode of on-change, sample, or target-defined. It delivers model-driven telemetry from SR OS to NSP.

NSP Workflow Manager

A component that executes Python-based workflows for service provisioning and assurance. Workflows can be scheduled, event-triggered, or chained into larger processes.

NSP intent-based service

A high-level service request such as a VPRN or Epipe that NSP translates into device configuration, path computation, and closed-loop assurance without manual CLI.

NSP API gateway

A REST interface exposing service, discovery, and telemetry operations. Authentication uses OAuth2 tokens or basic credentials depending on deployment.

NSP Fabric Services

An NSP capability that automates data center fabric deployment, including underlay routing and BGP EVPN VXLAN overlay, using templates and intent.

SR OS IP filter

An IPv4 ACL applied to a SAP, interface, or CPM. Entries are evaluated first-match unless next-entry is specified, and a default action applies when no entry matches.

CPM filter

A control-plane filter applied to the SR OS CPM to rate-limit and drop unwanted traffic destined to the router, protecting against DoS and scanning.

uRPF strict mode

A unicast RPF check that drops packets whose source address is not reachable via the interface they arrived on. It mitigates spoofed source addresses.

BGP TCP-AO

TCP Authentication Option provides stronger, algorithm-agile peer authentication than TCP-MD5, supporting key rotation and HMAC-SHA algorithms on SR OS BGP sessions.

MACsec 802.1AE

A hop-by-hop Layer 2 encryption and integrity protocol using a CAK/CKN. On SR OS it is configured per Ethernet port and protects traffic between adjacent devices.

RPKI origin validation

A BGP security mechanism that checks whether the origin AS in an announcement matches a signed ROA. SR OS can mark routes valid, invalid, or not-found.

IPsec IKEv2

The key exchange protocol used to establish IPsec SAs on SR OS. It supports pre-shared keys or certificates and negotiates ESP with AES-GCM or AES-CBC plus SHA.

VXLAN VNI

A 24-bit identifier in the VXLAN header that segments the overlay, supporting up to about 16 million segments. The outer UDP destination port defaults to 4789.

EVPN Type 5 route

An IP Prefix route used to advertise subnets in EVPN, enabling inter-VRF and inter-DC routing and prefix summarization without per-host MAC advertisement.

Anycast gateway

A design where the same IP and MAC are configured on all leaf switches for a subnet, so hosts can move between leafs without re-ARP or gateway changes.

Symmetric IRB

An EVPN routing model where the same VNI is used for Layer 2 and Layer 3, simplifying inter-subnet forwarding compared with asymmetric IRB.