What is the purpose of an OSPF sham-link in an MPLS VPN when OSPF is the PE‑CE protocol?
Choose an answer
Tap an option to check your answer.
Correct answer: to correct OSPF backdoor routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network.
Why this is the answer
An OSPF sham-link is used to prevent routing loops and suboptimal routing paths, known as "backdoor routing," in an MPLS VPN environment where OSPF is the PE-CE routing protocol. When a CE router has multiple paths to a destination—one through the MPLS VPN backbone and another direct path (e.g., a physical link or another VPN)—OSPF's preference for intra-area routes can cause traffic to prefer the direct, potentially slower, path over the MPLS VPN. The sham-link creates a virtual OSPF link between PE routers, making the MPLS VPN path appear as a direct intra-area connection, thus restoring proper OSPF path selection. The incorrect options misunderstand the sham-link's purpose. It's not about enabling inter- or intra-area routing itself, as OSPF already handles that. It specifically addresses the backdoor routing problem that arises when OSPF's area rules interact with the MPLS VPN's indirect connectivity. The sham-link is also exclusively for PE-CE OSPF, not PE-PE, as PE-PE routing within the service provider core typically uses IGP like OSPF or IS-IS to exchange VPN routes, but not for the specific backdoor routing issue between CEs.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed