nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #63

Your on-premises data center has 2 routers connected to your Google Cloud environment through a VPN on each router. All applications are working correctly; however, all of the traffic is passing…

The correct answer is D. The ASNs being used on the on-premises routers are different. Cloud Router doesn't use ECMP across routes with different origin ASNs. For cases where you have multiple on-premises routers connected to a single Cloud Router, the Cloud Router learns and propagates routes from the router with the lowest ASN. Cloud Router ignores advertised…

Submitted by saadiq_pk· Apr 18, 2026Configuring network services

Question

Your on-premises data center has 2 routers connected to your Google Cloud environment through a VPN on each router. All applications are working correctly; however, all of the traffic is passing across a single VPN instead of being load-balanced across the 2 connections as desired. During troubleshooting you find: - Each on-premises router is configured with a unique ASN. ?Each on- premises router is configured with the same routes and priorities. - Both on-premises routers are configured with a VPN connected to a single Cloud Router. - BGP sessions are established between both on-premises routers and the Cloud Router. - Only 1 of the on-premises router's routes are being added to the routing table. What is the most likely cause of this problem?

Options

  • AThe on-premises routers are configured with the same routes.
  • BA firewall is blocking the traffic across the second VPN connection.
  • CYou do not have a load balancer to load-balance the network traffic.
  • DThe ASNs being used on the on-premises routers are different.

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    11% (4)
  • D
    80% (28)

Explanation

Cloud Router doesn't use ECMP across routes with different origin ASNs. For cases where you have multiple on-premises routers connected to a single Cloud Router, the Cloud Router learns and propagates routes from the router with the lowest ASN. Cloud Router ignores advertised routes from routers with higher ASNs, which might result in unexpected behavior. For example, you might have two on-premises routers advertise routes that are using two different Cloud VPN tunnels. You expect traffic to be load balanced between the tunnels, but Google Cloud uses only one of the tunnels because Cloud Router only propagated routes from the on-premises router with the lower ASN. https://cloud.google.com/network-connectivity/docs/router/support/troubleshooting#ecmp

Topics

#BGP#Cloud Router#VPN#ECMP

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice