Huawei H12-821 Practice Test 54
Question 530
A Huawei network troubleshooter needs objective evidence for this case: An operator enables immediate preemption after a flapping upstream circuit and sees gateway ownership oscillate repeatedly with each short restoration. Which diagnostic check MOST DIRECTLY distinguishes the relevant problem? Select ONE best answer.
- Review the monitored uplink state, tracked priority decrement, master/backup advertisements, preemption settings and return-path reachability.
- Inspect traffic classifier matches, policy routing next-hop eligibility, egress statistics and the normal destination route that would otherwise apply.
- Inspect local and remote BFD configured minima, actual negotiated intervals, multiplier values, CPU pressure and observed detection timestamps.
- Compare host ARP for the virtual gateway, advertised VRRP virtual MAC, switch forwarding table, master state and test traffic during takeover.
Explanation
Correct Answer
A:The discriminating diagnostic check is: Review the monitored uplink state, tracked priority decrement, master/backup advertisements, preemption settings and return-path reachability. In this incident (An operator enables immediate preemption after a flapping upstream circuit and sees gateway ownership oscillate repeatedly with each short restoration.) the desired evidence-led outcome is: Default-gateway mastership moves to a router with working upstream connectivity and recovers predictably after restoration.
Incorrect Answers
B:This option proposes: Inspect traffic classifier matches, policy routing next-hop eligibility, egress statistics and the normal destination route that would otherwise apply. It addresses the different topic Policy-based routing versus destination routing, not the directly tested VRRP interface tracking and controlled preemption failure in the stated incident (An operator enables immediate preemption after a flapping upstream circuit and sees gateway ownership oscillate repeatedly with each short restoration.).
C:This option proposes: Inspect local and remote BFD configured minima, actual negotiated intervals, multiplier values, CPU pressure and observed detection timestamps. It addresses the different topic BFD detection multiplier and negotiated timers, not the directly tested VRRP interface tracking and controlled preemption failure in the stated incident (An operator enables immediate preemption after a flapping upstream circuit and sees gateway ownership oscillate repeatedly with each short restoration.).
D:This option proposes: Compare host ARP for the virtual gateway, advertised VRRP virtual MAC, switch forwarding table, master state and test traffic during takeover. It addresses the different topic VRRP virtual MAC and endpoint ARP continuity, not the directly tested VRRP interface tracking and controlled preemption failure in the stated incident (An operator enables immediate preemption after a flapping upstream circuit and sees gateway ownership oscillate repeatedly with each short restoration.).
Question 531
A network operator evaluates the result of a planned remediation. An operator enables immediate preemption after a flapping upstream circuit and sees gateway ownership oscillate repeatedly with each short restoration. The validation is: Review the monitored uplink state, tracked priority decrement, master/backup advertisements, preemption settings and return-path reachability. Which outcome BEST establishes success? Select ONE best answer.
- The two neighbors converge on consistent current LSP contents with no persistent gaps or sequence disputes.
- Default-gateway mastership moves to a router with working upstream connectivity and recovers predictably after restoration.
- The intended higher-priority eligible router answers for the shared gateway while the backup remains prepared for a takeover.
- The selected timer values achieve the required failure-detection objective without causing repeated false failures under ordinary load.
Explanation
Correct Answer
B:That follows from the targeted Recommended action: Configure VRRP priority tracking with suitable preemption behavior so loss of upstream connectivity changes the preferred gateway.
Incorrect Answers
A:That option concerns IS-IS LSP synchronization using CSNP and PSNP. That follows from the targeted Recommended action: Configure VRRP priority tracking with suitable preemption behavior so loss of upstream connectivity changes the preferred gateway.
C:This option proposes: The intended higher-priority eligible router answers for the shared gateway while the backup remains prepared for a takeover. It addresses the different topic VRRP master election priority and tie breaks, not the directly tested VRRP interface tracking and controlled preemption failure in the stated incident (An operator enables immediate preemption after a flapping upstream circuit and sees gateway ownership oscillate repeatedly with each short restoration.).
D:That option concerns BFD detection multiplier and negotiated timers. That follows from the targeted Recommended action: Configure VRRP priority tracking with suitable preemption behavior so loss of upstream connectivity changes the preferred gateway.
Question 532
An operations change board examines an unsafe shortcut for this incident. An operator enables immediate preemption after a flapping upstream circuit and sees gateway ownership oscillate repeatedly with each short restoration. Which proposed assumption is MOST DIRECTLY dangerous or unsupported? Select ONE best answer.
- Assume a configured BFD transmit interval alone exactly equals the detection timeout regardless of the peer's receive requirement or detection multiplier.
- Expect an EVPN Type 2 MAC advertisement alone to make an unreachable underlay VTEP routable without any transport path.
- Track only the host-facing VRRP VLAN while ignoring the active master's failed upstream WAN and insist the gateway must remain preferred regardless of reachability.
- Assume two routers can each configure a different virtual IP for the same VRRP group and still present one consistent default gateway to hosts.
Explanation
Correct Answer
C:It conflicts with: VRRP tracking can reduce a router's effective priority when a monitored interface or related condition fails; preemption and delay choices determine whether an eligible higher-priority backup takes over as intended.
Incorrect Answers
A:This option proposes: Assume a configured BFD transmit interval alone exactly equals the detection timeout regardless of the peer's receive requirement or detection multiplier. It addresses the different topic BFD detection multiplier and negotiated timers, not the directly tested VRRP interface tracking and controlled preemption failure in the stated incident (An operator enables immediate preemption after a flapping upstream circuit and sees gateway ownership oscillate repeatedly with each short restoration.).
B:This option proposes: Expect an EVPN Type 2 MAC advertisement alone to make an unreachable underlay VTEP routable without any transport path. It addresses the different topic MP-BGP EVPN route types and forwarding separation, not the directly tested VRRP interface tracking and controlled preemption failure in the stated incident (An operator enables immediate preemption after a flapping upstream circuit and sees gateway ownership oscillate repeatedly with each short restoration.).
D:This option proposes: Assume two routers can each configure a different virtual IP for the same VRRP group and still present one consistent default gateway to hosts. It addresses the different topic VRRP master election priority and tie breaks, not the directly tested VRRP interface tracking and controlled preemption failure in the stated incident (An operator enables immediate preemption after a flapping upstream circuit and sees gateway ownership oscillate repeatedly with each short restoration.).
Question 533
A Huawei HCIP-Datacom engineer investigates the following network fault: An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually. Which corrective action should be prioritized on the stated facts? Select ONE best answer.
- Analyze Virtual Router Redundancy Protocol master election using priorities and the virtual router ID instead of a router's physical interface address alone.
- Calculate or verify the practical failure-detection threshold from BFD transmit intervals, advertised receive intervals and the detect multiplier.
- Troubleshoot BGP establishment by distinguishing TCP port 179 transport, peer configuration and OPEN capability negotiation.
- Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
Explanation
Correct Answer
D:The case-specific corrective step is: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover. The governing technical behavior is: VRRP uses a virtual router identity and virtual MAC per IPv4 group to preserve a stable next-hop identity across master changes; correct failover still requires matching VLAN, neighbor learning and eligible router state.
Incorrect Answers
A:This option proposes: Analyze Virtual Router Redundancy Protocol master election using priorities and the virtual router ID instead of a router's physical interface address alone. It addresses the different topic VRRP master election priority and tie breaks, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually.).
B:This option proposes: Calculate or verify the practical failure-detection threshold from BFD transmit intervals, advertised receive intervals and the detect multiplier. It addresses the different topic BFD detection multiplier and negotiated timers, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually.).
C:This option proposes: Troubleshoot BGP establishment by distinguishing TCP port 179 transport, peer configuration and OPEN capability negotiation. It addresses the different topic BGP transport reachability and session states, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually.).
Question 534
An enterprise networking reviewer examines this Huawei Datacom situation. An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually. A colleague proposes this action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover. Which protocol principle BEST supports that proposal? Select ONE best answer.
- AAA separates authentication, authorization and accounting for device management, while SSH protects management sessions and access policies can limit trusted administrative sources.
- VRRP tracking can reduce a router's effective priority when a monitored interface or related condition fails; preemption and delay choices determine whether an eligible higher-priority backup takes over as intended.
- VRRP uses a virtual router identity and virtual MAC per IPv4 group to preserve a stable next-hop identity across master changes; correct failover still requires matching VLAN, neighbor learning and eligible router state.
- BFD exchanges lightweight control packets to test bidirectional forwarding paths and can notify registered clients such as routing processes; it is not itself a route-distribution protocol or a guarantee of link-physical failure.
Explanation
Correct Answer
C:The relevant protocol behavior is: VRRP uses a virtual router identity and virtual MAC per IPv4 group to preserve a stable next-hop identity across master changes; correct failover still requires matching VLAN, neighbor learning and eligible router state. In the stated scenario (An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually.) this supports the controlled action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
Incorrect Answers
A:This option proposes: AAA separates authentication, authorization and accounting for device management, while SSH protects management sessions and access policies can limit trusted administrative sources. It addresses the different topic Network device AAA role SSH and management-plane protection, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually.).
B:This option proposes: VRRP tracking can reduce a router's effective priority when a monitored interface or related condition fails; preemption and delay choices determine whether an eligible higher-priority backup takes over as intended. It addresses the different topic VRRP interface tracking and controlled preemption, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually.).
D:This option proposes: BFD exchanges lightweight control packets to test bidirectional forwarding paths and can notify registered clients such as routing processes; it is not itself a route-distribution protocol or a guarantee of link-physical failure. It addresses the different topic BFD rapid session detection and routing protocol association, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually.).
Question 535
A Huawei network troubleshooter needs objective evidence for this case: An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually. Which diagnostic check MOST DIRECTLY distinguishes the relevant problem? Select ONE best answer.
- Inspect route sources, redistribution boundaries, attached route tags, candidate best paths and which protocol is currently advertising the problem prefix.
- Inspect local and remote BFD configured minima, actual negotiated intervals, multiplier values, CPU pressure and observed detection timestamps.
- Compare host ARP for the virtual gateway, advertised VRRP virtual MAC, switch forwarding table, master state and test traffic during takeover.
- Inspect BFD discriminator and session state, timer negotiations, neighbor addresses, routing protocol binding and actual packet-loss observations.
Explanation
Correct Answer
C:The discriminating diagnostic check is: Compare host ARP for the virtual gateway, advertised VRRP virtual MAC, switch forwarding table, master state and test traffic during takeover. In this incident (An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually.) the desired evidence-led outcome is: Hosts continue using the same logical default gateway through a master change and L2 learning converges to the correct uplink.
Incorrect Answers
A:This option proposes: Inspect route sources, redistribution boundaries, attached route tags, candidate best paths and which protocol is currently advertising the problem prefix. It addresses the different topic Route redistribution feedback loops and route tags, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually.).
B:This option proposes: Inspect local and remote BFD configured minima, actual negotiated intervals, multiplier values, CPU pressure and observed detection timestamps. It addresses the different topic BFD detection multiplier and negotiated timers, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually.).
D:This option proposes: Inspect BFD discriminator and session state, timer negotiations, neighbor addresses, routing protocol binding and actual packet-loss observations. It addresses the different topic BFD rapid session detection and routing protocol association, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually.).
Question 536
A network operator evaluates the result of a planned remediation. An employee's workstation keeps sending to the configured virtual IPv4 gateway after the master fails and network staff think the IP must be changed manually. The validation is: Compare host ARP for the virtual gateway, advertised VRRP virtual MAC, switch forwarding table, master state and test traffic during takeover. Which outcome BEST establishes success? Select ONE best answer.
- Hosts continue using the same logical default gateway through a master change and L2 learning converges to the correct uplink.
- The intended routing process responds to a verified forwarding failure in the designed interval without false mass failovers from aggressive unsupported timing.
- The selected timer values achieve the required failure-detection objective without causing repeated false failures under ordinary load.
- The route policy permits and transforms precisely the approved prefixes with the required attributes at the intended boundary.
Explanation
Correct Answer
A:That follows from the targeted action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
Incorrect Answers
B:That option concerns BFD rapid session detection and routing protocol association. That follows from the targeted action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
C:That option concerns BFD detection multiplier and negotiated timers. That follows from the targeted action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
D:That option concerns Route-policy node and filtering direction. That follows from the targeted action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
Question 537
A Huawei HCIP-Datacom engineer investigates the following network fault: Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways. Which corrective action should be prioritized on the stated facts? Select ONE best answer.
- Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
- Calculate or verify the practical failure-detection threshold from BFD transmit intervals, advertised receive intervals and the detect multiplier.
- Analyze Virtual Router Redundancy Protocol master election using priorities and the virtual router ID instead of a router's physical interface address alone.
- Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context.
Explanation
Correct Answer
A:The case-specific corrective step is: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover. The governing technical behavior is: VRRP uses a virtual router identity and virtual MAC per IPv4 group to preserve a stable next-hop identity across master changes; correct failover still requires matching VLAN, neighbor learning and eligible router state. Verify the solution through: Compare host ARP for the virtual gateway, advertised VRRP virtual MAC, switch forwarding table, master state and test traffic during takeover.
Incorrect Answers
B:This option proposes: Calculate or verify the practical failure-detection threshold from BFD transmit intervals, advertised receive intervals and the detect multiplier. It addresses the different topic BFD detection multiplier and negotiated timers, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways.).
C:This option proposes: Analyze Virtual Router Redundancy Protocol master election using priorities and the virtual router ID instead of a router's physical interface address alone. It addresses the different topic VRRP master election priority and tie breaks, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways.).
D:This option proposes: Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context. It addresses the different topic DHCP relay across a routed user VLAN, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways.).
Question 538
An enterprise networking reviewer examines this Huawei Datacom situation. Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways. A colleague proposes this action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover. Which protocol principle BEST supports that proposal? Select ONE best answer.
- VRRP provides a shared virtual default-gateway identity, generally electing a higher-priority router as master while tie-breaking rules and address-owner behavior are relevant; hosts use the virtual address rather than the physical router selected by a static setting.
- BFD exchanges lightweight control packets to test bidirectional forwarding paths and can notify registered clients such as routing processes; it is not itself a route-distribution protocol or a guarantee of link-physical failure.
- VRRP uses a virtual router identity and virtual MAC per IPv4 group to preserve a stable next-hop identity across master changes; correct failover still requires matching VLAN, neighbor learning and eligible router state.
- A stateful firewall tracks valid connection context and can permit related return traffic based on session state; network ACLs may filter packets independently without the same stateful application tracking.
Explanation
Correct Answer
C:The relevant protocol behavior is: VRRP uses a virtual router identity and virtual MAC per IPv4 group to preserve a stable next-hop identity across master changes; correct failover still requires matching VLAN, neighbor learning and eligible router state. In the stated scenario (Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways.) this supports the controlled action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
Incorrect Answers
A:This option proposes: VRRP provides a shared virtual default-gateway identity, generally electing a higher-priority router as master while tie-breaking rules and address-owner behavior are relevant; hosts use the virtual address rather than the physical router selected by a static setting. It addresses the different topic VRRP master election priority and tie breaks, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways.).
B:This option proposes: BFD exchanges lightweight control packets to test bidirectional forwarding paths and can notify registered clients such as routing processes; it is not itself a route-distribution protocol or a guarantee of link-physical failure. It addresses the different topic BFD rapid session detection and routing protocol association, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways.).
D:This option proposes: A stateful firewall tracks valid connection context and can permit related return traffic based on session state; network ACLs may filter packets independently without the same stateful application tracking. It addresses the different topic Stateful firewall sessions versus basic packet ACL filtering, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways.).
Question 539
A Huawei network troubleshooter needs objective evidence for this case: Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways. Which diagnostic check MOST DIRECTLY distinguishes the relevant problem? Select ONE best answer.
- Inspect local and remote BFD configured minima, actual negotiated intervals, multiplier values, CPU pressure and observed detection timestamps.
- Compare host ARP for the virtual gateway, advertised VRRP virtual MAC, switch forwarding table, master state and test traffic during takeover.
- Inspect AP discovery method, controller address reachability, CAPWAP control state, authorized AP inventory and configured service traffic forwarding mode.
- Review the monitored uplink state, tracked priority decrement, master/backup advertisements, preemption settings and return-path reachability.
Explanation
Correct Answer
B:The discriminating diagnostic check is: Compare host ARP for the virtual gateway, advertised VRRP virtual MAC, switch forwarding table, master state and test traffic during takeover. In this incident (Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways.) the desired evidence-led outcome is: Hosts continue using the same logical default gateway through a master change and L2 learning converges to the correct uplink.
Incorrect Answers
A:This option proposes: Inspect local and remote BFD configured minima, actual negotiated intervals, multiplier values, CPU pressure and observed detection timestamps. It addresses the different topic BFD detection multiplier and negotiated timers, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways.).
C:This option proposes: Inspect AP discovery method, controller address reachability, CAPWAP control state, authorized AP inventory and configured service traffic forwarding mode. It addresses the different topic Large campus WLAN AC AP and CAPWAP architecture, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways.).
D:This option proposes: Review the monitored uplink state, tracked priority decrement, master/backup advertisements, preemption settings and return-path reachability. It addresses the different topic VRRP interface tracking and controlled preemption, not the directly tested VRRP virtual MAC and endpoint ARP continuity failure in the stated incident (Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways.).
Question 540
A network operator evaluates the result of a planned remediation. Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways. The validation is: Compare host ARP for the virtual gateway, advertised VRRP virtual MAC, switch forwarding table, master state and test traffic during takeover. Which outcome BEST establishes success? Select ONE best answer.
- Hosts continue using the same logical default gateway through a master change and L2 learning converges to the correct uplink.
- Default-gateway mastership moves to a router with working upstream connectivity and recovers predictably after restoration.
- The selected timer values achieve the required failure-detection objective without causing repeated false failures under ordinary load.
- VLANs follow their intended instance roots across a consistent region without unintended boundary ports or loops.
Explanation
Correct Answer
A:That follows from the targeted Recommended action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
Incorrect Answers
B:That option concerns VRRP interface tracking and controlled preemption. That follows from the targeted Recommended action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
C:That option concerns BFD detection multiplier and negotiated timers. That follows from the targeted Recommended action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
D:That option concerns MSTP region and VLAN-to-instance mappings. That follows from the targeted Recommended action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.