ANS-C01 · Question #266
A logistics company has multiple VPCs in an AWS Region. The company uses a transit gateway to connect the VPCs. The company has several on- premises offices that connect to the transit gateway by…
The correct answer is C. Enable equal-cost multi-path (ECMP) routing on the transit gateway. (Ensure ECMP is supported. To use both IPsec tunnels for maximizing bandwidth, equal-cost multi-path (ECMP) routing must be enabled. ECMP allows the transit gateway to load balance traffic across multiple paths (in this case, both IPsec tunnels). For ECMP to work: 1. Transit Gateway ECMP Support: The…
Question
A logistics company has multiple VPCs in an AWS Region. The company uses a transit gateway to connect the VPCs. The company has several on- premises offices that connect to the transit gateway by using AWS Site-to-Site VPN connections over the internet. The company has configured one transit gateway VPN attachment for each office. Route propagation is enabled on all route tables. Each Site-to-Site VPN connection uses two tunnels in an active-passive configuration. The company configured each office with appropriate static routes on both the Site-to-Site VPN connection and the office's customer gateway. The company wants to use both IPsec tunnels of every office to maximize the overall VPN connection bandwidth. Which design changes are necessary to meet these requirements?
Options
- ACreate an AWS Transit Gateway Connect attachment for each office Use the existing VPN
- BEnable equal-cost multi-path (ECMP) routing on the transit gateway. Ensure ECMP is supported
- CEnable equal-cost multi-path (ECMP) routing on the transit gateway. (Ensure ECMP is supported
- DEnable equal-cost multi-path (ECMP) routing on the transit gateway. Ensure ECMP is supported
How the community answered
(40 responses)- A5% (2)
- B3% (1)
- C83% (33)
- D10% (4)
Explanation
To use both IPsec tunnels for maximizing bandwidth, equal-cost multi-path (ECMP) routing must be enabled. ECMP allows the transit gateway to load balance traffic across multiple paths (in this case, both IPsec tunnels). For ECMP to work: 1. Transit Gateway ECMP Support: The transit gateway must have ECMP routing enabled to distribute traffic across multiple VPN tunnels. 2. BGP Configuration: Static routing cannot support ECMP. Switching to BGP allows dynamic route advertisements and supports ECMP. Removing static routes ensures that the BGP-learned routes take precedence. 3. Customer Gateway ECMP Support: The customer gateway must also support ECMP for the configuration to work end-to-end. By implementing these changes, both tunnels can be utilized simultaneously, effectively increasing the available bandwidth for the Site-to-Site VPN connections.
Community Discussion
No community discussion yet for this question.