ANS-C01 Question 341
Single answerA company needs to set up a hybrid architecture to connect their on-premises data center to an Amazon VPC. The on-premises network uses a private IP address range that overlaps with the CIDR range of the VPC. The company wants to ensure bidirectional communication between the on-premises data center and the VPC. What is the most appropriate solution to resolve the overlapping IP address issue?
- A
Use AWS Direct Connect with BGP to dynamically route traffic and resolve the overlapping IP ranges.
- B
Use a Network Address Translation (NAT) gateway in the VPC to translate the IP addresses of the VPC instances.
- C
Configure a Transit Gateway with a route table and enable VPN attachment to handle the overlapping IP ranges.
- D
Deploy a third-party software appliance in the VPC that performs network address translation for the overlapping IP ranges.
Show answer and explanation
Correct answer: D
Explanation
When there is an overlapping IP address range between an on-premises network and an Amazon VPC, network address translation (NAT) is required to translate the IP addresses and avoid conflicts. While AWS native services like Transit Gateway and Direct Connect facilitate connectivity, they do not address overlapping IP ranges directly. Deploying a third-party software appliance in the VPC to perform NAT ensures that both networks can communicate bidirectionally without IP conflicts.
- A. Incorrect.
AWS Direct Connect with BGP does not resolve overlapping IP address issues. It provides dedicated connectivity but does not address IP translation or routing conflicts.
- B. Incorrect.
A NAT gateway translates outbound traffic from instances in a private subnet to the internet or other public destinations but does not solve IP address conflicts for bidirectional traffic with overlapping IP ranges.
- C. Incorrect.
Transit Gateway is a powerful tool for managing network traffic, but it does not inherently resolve overlapping IP addresses. Additional mechanisms like NAT are required for such scenarios.
- D. Correct.
Using a third-party software appliance in the VPC to perform network address translation is a viable solution to handle overlapping IP ranges. The appliance can translate IP addresses to avoid conflicts and enable seamless communication.