PCNSA · Question #155
The Palo Alto Networks NGFW was configured with a single virtual router named VR-1. What changes are required on VR-1 to route traffic between two interfaces on the NGFW?
The correct answer is B. Add interfaces to the virtual router. A virtual router automatically generates connected routes for every interface assigned to it. When both interfaces are added to VR-1, the firewall knows the directly connected subnets and can route between them without any additional static routes or redistribution profiles…
Question
The Palo Alto Networks NGFW was configured with a single virtual router named VR-1. What changes are required on VR-1 to route traffic between two interfaces on the NGFW?
Options
- AAdd static routes to route between the two interfaces
- BAdd interfaces to the virtual router
- CAdd zones attached to interfaces to the virtual router
- DEnable the redistribution profile to redistribute connected routes
How the community answered
(28 responses)- A4% (1)
- B89% (25)
- C7% (2)
Explanation
A virtual router automatically generates connected routes for every interface assigned to it. When both interfaces are added to VR-1, the firewall knows the directly connected subnets and can route between them without any additional static routes or redistribution profiles. Static routes (choice A) are only needed to reach non-directly-connected networks. Zones are attached to interfaces, not to virtual routers directly (choice C). A redistribution profile (choice D) is used to share routes between virtual routers or into dynamic routing protocols - not required for basic inter-interface routing.
Topics
Community Discussion
No community discussion yet for this question.