What are the advantages of multiple virtual routers on a NetScreen device?
A.
They provide separate routing tables that can hide internal network structure
B.
They reduce packet-forwarding overhead associated with layer-3 operations
C.
They increase the number of possible routing table entries per NetScreen device
D.
They make it possible to forward traffic between security zones without policy lookup
Explanation:
By separating routing information into two virtual routers (VRs), you can control the information in a given routing domain that is visible to other routing domains. For example, you can keep the routing information for all the security zones inside a corporate network on the default predefined VR, trust-vr, and all the routing information for all the zones outside the corporate network on the other predefined VR, untrust-vr. Because the information in the routing table of one VR is not visible to the other VR, you can keep internal network routing information separate from untrusted sources outside the company.