A Tier-0 gateway in Active-Active mode is configured with ECMP. Upstream TOR switches report asymmetric routing, causing intermittent firewall session drops. Which design change MOST effectively…

The correct answer is C. Disable stateful services on the Tier-0. In Active-Active Tier-0, stateful services (NAT, LB, Gateway Firewall) can break with ECMP due to asymmetric paths. Disabling stateful services (or moving them to Tier-1 / dedicated nodes) preserves ECMP benefits while preventing session drops. Exam note: Do not jump straight…

Troubleshoot NSX-T Data Center Networking

Question

A Tier-0 gateway in Active-Active mode is configured with ECMP. Upstream TOR switches report asymmetric routing, causing intermittent firewall session drops. Which design change MOST effectively resolves this issue while maintaining redundancy?

Options

AEnable BFD on all BGP neighbors
BConvert Tier-0 to Active-Standby mode
CDisable stateful services on the Tier-0
DIncrease MTU on the underlay network

How the community answered

(43 responses)

A
5% (2)
B
19% (8)
C
70% (30)
D
7% (3)

Explanation

In Active-Active Tier-0, stateful services (NAT, LB, Gateway Firewall) can break with ECMP due to asymmetric paths. Disabling stateful services (or moving them to Tier-1 / dedicated nodes) preserves ECMP benefits while preventing session drops. Exam note: Do not jump straight to Active-Standby unless asked to reduce ECMP.

Topics

#ECMP#Active-Active#asymmetric routing#stateful services

Community Discussion

No community discussion yet for this question.

Full 3V0-25.25 Practice