HPE Aruba Certified Network Security Expert (ACNSX) — Question 39

An administrator is managing a pair of core AOS-CX switches configured for VSX. Connected to this core are pairs of aggregation layer AOS-CX switches configured for VSX. OSPF is running between the aggregation and core layers. To speed up OSPF convergence, the administrator has configured BFD between the core and aggregation switches.
What is a best practice the administrator should implement to reduce CPU processing on the switches if a BFD neighbor fails?

Answer options

• A. Disable ICMP redirects
• B. Implement graceful restart
• C. Increase the BFD echo timers
• D. Increase the VSX keepalive timer

Correct answer: A

Explanation

Disabling ICMP redirects helps to minimize unnecessary CPU load when a BFD neighbor goes down, as it prevents the switches from processing ICMP redirect messages that are not needed in this scenario. Implementing graceful restart, increasing BFD echo timers, or extending the VSX keepalive timer do not specifically address CPU processing during a BFD neighbor failure.