ANS-C01 Question 199
Select 3You are designing a hybrid network that connects an on-premises datacenter to an Amazon VPC using AWS Direct Connect. The on-premises network uses VLANs for segmentation, and the VPC is configured with multiple subnets in a single VPC. You want to ensure proper Layer 2 and Layer 3 connectivity while maintaining segment isolation between different VLANs. What steps should you take as part of your network configuration?
- A
Configure a private virtual interface (VIF) on the Direct Connect connection for each VLAN.
- B
Use AWS Transit Gateway to manage routing between VPC subnets and the on-premises VLANs.
- C
Configure the on-premises router to encapsulate VLAN traffic using 802.1Q tagging.
- D
Enable BGP (Border Gateway Protocol) on the Direct Connect connection to exchange routing information.
- E
Use a public virtual interface (VIF) to connect the on-premises network to the VPC.
Show answer and explanation
Correct answers: A, C, D
Explanation
To establish proper connectivity between an on-premises datacenter using VLANs and an Amazon VPC through Direct Connect, a private virtual interface (VIF) is required for each VLAN to ensure segment isolation. VLAN traffic must be encapsulated using 802.1Q tagging at the on-premises router to maintain Layer 2 segmentation. Additionally, BGP must be enabled to exchange Layer 3 routing information between the two networks. A public VIF is not appropriate in this scenario as it is used for accessing public AWS services rather than private VPC connectivity.
- A. Correct.
Correct. A private virtual interface (VIF) is required to establish Layer 2 connectivity between an on-premises VLAN and an Amazon VPC. Each VLAN should have its own private VIF for proper segmentation.
- B. Incorrect.
Incorrect. AWS Transit Gateway is used for routing between VPCs and on-premises connections, but it is not necessary for maintaining VLAN segment isolation in this scenario.
- C. Correct.
Correct. The on-premises router needs to encapsulate VLAN traffic using 802.1Q tagging to ensure Layer 2 VLAN traffic is properly segmented and recognized by AWS Direct Connect.
- D. Correct.
Correct. BGP is required on the Direct Connect connection to exchange Layer 3 routing information between the on-premises network and the Amazon VPC.
- E. Incorrect.
Incorrect. A public virtual interface (VIF) is used to access public AWS services like S3 or DynamoDB, not for private Layer 2 or Layer 3 connectivity to a VPC.