Your organization wants to deploy HA VPN over Cloud Interconnect to ensure encryption-in- transit over the Cloud Interconnect connections. You have created a Cloud Router and two encrypted VLAN…

Question

Options

• ACreate an HA VPN gateway and associate the gateway with your two encrypted VLAN
• BEnable MACsec on Partner Interconnect.
• CEnable MACsec for Cloud Interconnect on the VLAN attachments.
• DCreate an HA VPN gateway and associate the gateway with your two encrypted VLAN

• A
  5% (1)
• B
  18% (4)
• C
  5% (1)
• D
  73% (16)

Explanation

To deploy HA VPN over Cloud Interconnect and ensure encryption in transit, follow these steps: Create an HA VPN gateway: - The HA VPN gateway enables highly available VPN connections with encryption. - The HA VPN gateway will terminate VPN tunnels that are configured over the encrypted VLAN Associate the HA VPN gateway with VLAN attachments: - The two encrypted VLAN attachments provide connectivity over Cloud Interconnect and support encrypted traffic. - Associating the VLAN attachments with the HA VPN gateway ensures that the traffic is encrypted while transiting over the Cloud Interconnect connection. Create a dedicated Cloud Router for HA VPN: - A new dedicated Cloud Router must be created to manage BGP routing specifically for the HA VPN configuration. This avoids conflicts and ensures separation between Cloud Interconnect routing and VPN-specific routing. - Configure BGP sessions between the Cloud Router and the on-premises router to establish routing for the VPN tunnels. Configure peer VPN gateway and HA VPN tunnels: - Configure the on-premises peer VPN gateway to establish connectivity with the HA VPN - Create HA VPN tunnels on both interfaces of the VPN gateway for redundancy and failover. Why not enable MACsec? - MACsec (Media Access Control Security) is an encryption protocol used for Layer 2 security. While it provides encryption for Cloud Interconnect, it does not replace the need for VPN encryption and is not part of this HA VPN deployment requirement. This configuration ensures encryption in transit, redundancy (using HA VPN), and proper routing, meeting the organization's requirements for secure and reliable connectivity over Cloud

No community discussion yet for this question.