An administrator is tasked to create a development environment with a Tier-1 gateway to host overlay segments for only East/West workload communication. North/South communication is also required…

Question

Options

• AConfigure a Service Interface on the Tier-1 gateway to connect each overlay segment to provide
• BEnable route advertisement and connect the Tier-1 gateway to the Tier-0 gateway.
• CAssign the Tier-1 gateway to an Edge Cluster before any segments are created.
• DKeep route advertisement disabled and leave the Tier-1 gateway disconnected from any Tier-0

• A
  7% (3)
• B
  80% (35)
• C
  2% (1)
• D
  11% (5)

Explanation

In an NSX-based VCF environment, the Tier-1 Gateway is designed to provide localized routing for a specific tenant, department, or environment (like "Development"). Even if the requirements exclude stateful services like NAT or VPN, the gateway must still be logically connected to the higher-tier routing fabric to facilitate North/South communication. East-West communication--traffic between VMs on the same or different overlay segments attached to the same Tier-1--is handled by the Distributed Router (DR) component of the Tier-1 gateway. This happens automatically as soon as segments are attached to the gateway. However, for a VM on one of these segments to reach an "external" destination (such as a shared service in the Management Domain or the public internet), the Tier-1 must have a path to the Tier-0 Gateway. To satisfy the North/South requirement, the administrator must connect the Tier-1 gateway to a Tier- 0 gateway and, crucially, enable Route Advertisement. Without route advertisement, the Tier-0 gateway will not know that the subnets (prefixes) behind the Tier-1 gateway even exist. Consequently, while the Tier-1 might have a default route pointing up to the Tier-0, the physical network will have no return path to the VMs, breaking external connectivity.

No community discussion yet for this question.