ANS-C01 Question 203
Select 4Your company has implemented an SD-WAN solution to connect branch offices with the central data center. You want to integrate this SD-WAN solution with AWS to enable seamless connectivity between your branch offices, on-premises data center, and AWS workloads. To achieve this, you plan to use AWS Transit Gateway Connect. Which of the following steps are required to establish this integration?
- A
Create a Transit Gateway Connect attachment for the SD-WAN appliance.
- B
Configure a GRE tunnel between the SD-WAN appliance and the Transit Gateway Connect attachment.
- C
Enable BGP on the Transit Gateway Connect attachment to exchange routing information.
- D
Create a Transit Gateway VPC attachment between the Transit Gateway and your AWS workload's VPC.
- E
Set up a Direct Connect gateway to connect the Transit Gateway to your SD-WAN appliance.
Show answer and explanation
Correct answers: A, B, C, D
Explanation
AWS Transit Gateway Connect is specifically designed to integrate SD-WAN appliances with AWS. To establish this integration, you must create a Transit Gateway Connect attachment, configure GRE tunnels for connectivity, and enable BGP for dynamic routing. Additionally, a VPC attachment is required to connect AWS workloads to the Transit Gateway. Direct Connect is not needed for this use case, as Transit Gateway Connect operates over GRE tunnels and supports dynamic routing.
- A. Correct.
This is correct. Transit Gateway Connect attachments are designed to enable SD-WAN and other third-party appliances to integrate with AWS Transit Gateway.
- B. Correct.
This is correct. GRE tunnels are required for establishing the connection between the SD-WAN appliance and the Transit Gateway Connect attachment.
- C. Correct.
This is correct. BGP must be enabled to dynamically exchange routing information between the SD-WAN appliance and AWS Transit Gateway.
- D. Correct.
This is correct. A VPC attachment is necessary to route traffic between AWS workloads in a VPC and the Transit Gateway.
- E. Incorrect.
This is incorrect. Direct Connect is not required for Transit Gateway Connect; the integration is designed to work over IP-based connections, such as VPN or GRE.