PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #234
You are creating a design that will connect your single on-premises data center to a VPC in Google Cloud by using an IPsec VPN connection. The connection must have a minimum SLA of 99.99%. There is…
The correct answer is D. 1. Create one HA VPN gateway. To achieve a minimum SLA of 99.99% for a VPN connection with a single on-premises VPN device and a single public IP address, the most appropriate solution is to use Google Cloud's HA VPN. HA VPN provides high availability and redundancy even when using a single public IP…
Question
Options
- A
- Create two HA VPN gateways.
- B
- Create one Classic VPN gateway and one HA VPN gateway.
- C
- Replace the existing on-premises VPN termination device with a new device that is configured
- D
- Create one HA VPN gateway.
How the community answered
(42 responses)- A2% (1)
- B10% (4)
- C17% (7)
- D71% (30)
Explanation
To achieve a minimum SLA of 99.99% for a VPN connection with a single on-premises VPN device and a single public IP address, the most appropriate solution is to use Google Cloud's HA VPN. HA VPN provides high availability and redundancy even when using a single public IP address on the on-premises VPN termination device. - An HA VPN gateway in Google Cloud has two interfaces (interface 0 and interface 1), each capable of creating a tunnel. - You can create two tunnels-one on each interface of the HA VPN gateway. Single public IP on the on-premises device: - Even with a single public IP address on the on-premises VPN device, you can terminate both tunnels on the same IP. HA VPN supports this configuration, and it ensures redundancy by leveraging two tunnels for failover. - HA VPN achieves 99.99% availability by using two independent tunnels for redundancy. If one tunnel fails, traffic seamlessly fails over to the other tunnel, maintaining availability. Least setup effort: - This approach does not require replacing the existing on-premises VPN device or configuring additional public IP addresses. It leverages the existing infrastructure with minimal configuration
Topics
Community Discussion
No community discussion yet for this question.