nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #227

You are configuring HA VPN for your organization to connect your on-premises environment to your Google Cloud network. Your on-premises environment is closest to the us-west1 Google Cloud region…

The correct answer is B. Create two HA VPN gateways, each with two tunnels. Configure BGP on each of the gateways'. HA VPN throughput and redundancy requirements: Each HA VPN gateway can support a maximum of 3 Gbps of throughput per gateway with two tunnels in active/active mode. Since your requirement is approximately 4 Gbps of bandwidth and 300,000 PPS, one HA VPN gateway would not…

Submitted by kevin_r· Apr 18, 2026Designing, planning, and prototyping a Google Cloud network

Question

You are configuring HA VPN for your organization to connect your on-premises environment to your Google Cloud network. Your on-premises environment is closest to the us-west1 Google Cloud region. You have Google Cloud resources in us-west2, which requires a throughput of 300,000 packets per second (PPS) and an approximate bandwidth of 4 Gbps. You need to have predictable bandwidth management and maintain an SLA of 99.99% with minimal costs. What should you do?

Options

  • ACreate an HA VPN gateway with two tunnels. Configure BGP on both tunnels with tunnel 0
  • BCreate two HA VPN gateways, each with two tunnels. Configure BGP on each of the gateways'
  • CCreate an HA VPN gateway with two tunnels. Configure BGP on both tunnels with tunnel 0
  • DCreate an HA VPN gateway with four tunnels. Configure BGP on four tunnels with tunnel 0

How the community answered

(34 responses)
  • A
    12% (4)
  • B
    56% (19)
  • C
    24% (8)
  • D
    9% (3)

Explanation

HA VPN throughput and redundancy requirements: Each HA VPN gateway can support a maximum of 3 Gbps of throughput per gateway with two tunnels in active/active mode. Since your requirement is approximately 4 Gbps of bandwidth and 300,000 PPS, one HA VPN gateway would not suffice. Using two HA VPN gateways ensures sufficient capacity to handle the required throughput. To achieve a 99.99% SLA, you need to configure HA VPN with two tunnels per gateway in active/active mode (equal routing priority). This ensures redundancy, load distribution, and high BGP configuration for load balancing: - By configuring the base routing priority metric (100) equally on both tunnels of each gateway, you ensure that traffic is evenly distributed across all tunnels. - On the on-premises router, configure the same multi-exit discriminator (MED) values for all tunnels to maintain consistent routing behavior.

Topics

#HA VPN#Network Scaling#High Availability#BGP Routing

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice