An administrator has been tasked with providing a networking solution including a Source and Destination NAT for a single Tenant. The tenant is using Centralized Connectivity with a Tier-0 Gateway…

Question

Options

• AChange Ten-A-Tier-0 to Active-Standby to support the stateful NAT.
• BCreate a new Tier-0 Gateway in Active-Standby mode and attach another Tier-1 Gateway.
• CCreate a Tier-1 Gateway in Distributed Routing mode only and do not attach it to Ten-A-Tier-0.
• DCreate a new Tier-1 Gateway in Active-Standby mode and attach it to Ten-A-Tier-0.

• A
  15% (9)
• B
  3% (2)
• C
  8% (5)
• D
  73% (43)

Explanation

In a VMware Cloud Foundation (VCF) environment, the implementation of stateful services--such as Source NAT (SNAT) and Destination NAT (DNAT)--requires a specific architectural configuration within the NSX component. This is because stateful services need a centralized point of processing (a Service Router or SR) to maintain the session state tables and ensure that return traffic is processed by the same node that initiated the session. The scenario describes a provider-level Tier-0 Gateway running in Active-Active mode. While Active- Active provides high-performance North-South throughput via ECMP (Equal Cost Multi- Pathing), it does not support stateful NAT services because asymmetric traffic flows would break the session tracking. Rather than changing the Tier-0 to Active-Standby (which would reduce overall throughput for the entire environment), the architecturally sound approach is to offload the stateful services to a Tier-1 Gateway. According to VCF design guides, when a Tier-1 Gateway is required to perform NAT for multiple subnets, it must be configured as a Stateful Tier-1. This involves associating the Tier-1 with an Edge Cluster and setting its high-availability mode to Active-Standby. Once the Tier-1 is created in this mode, it creates a Service Router (SR) component on the selected Edge Nodes. By attaching this Active-Standby Tier-1 to the existing Active-Active Tier-0 (Ten-A-Tier-0), the tenant's subnets can enjoy the benefits of localized stateful NAT while the environment maintains high-performance, non- stateful routing at the Tier-0 layer.

No community discussion yet for this question.