ANS-C01 Question 345
Select 3You are tasked with designing a hybrid network between an on-premises data center and AWS using AWS Direct Connect. To ensure dynamic route management between the on-premises network and the AWS Virtual Private Cloud (VPC), you decide to use Border Gateway Protocol (BGP). Which of the following steps are required to correctly configure BGP over AWS Direct Connect for this setup?
- A
Configure a private virtual interface (VIF) for the Direct Connect connection.
- B
Specify a public Autonomous System Number (ASN) for your on-premises router.
- C
Establish a BGP peering session between your on-premises router and the AWS Direct Connect router.
- D
Advertise your on-premises networks' CIDR blocks through BGP.
- E
Enable AWS Global Accelerator to act as a BGP route reflector.
Show answer and explanation
Correct answers: A, C, D
Explanation
To configure BGP over AWS Direct Connect for a hybrid network, you need to set up a private virtual interface (VIF), establish a BGP peering session, and advertise your on-premises networks' CIDR blocks through BGP. While the use of a public ASN is optional, enabling AWS Global Accelerator is irrelevant in this context as it does not participate in BGP routing.
- A. Correct.
Correct: A private virtual interface (VIF) is required for private communication between your on-premises network and an AWS VPC over Direct Connect.
- B. Incorrect.
Incorrect: You can use either a public or private ASN for your on-premises router, but it is not mandatory to use a public ASN.
- C. Correct.
Correct: A BGP peering session is necessary to establish dynamic routing between your on-premises router and the AWS Direct Connect router.
- D. Correct.
Correct: Advertising your on-premises CIDR blocks through BGP allows AWS to know which IP ranges are reachable via your on-premises network.
- E. Incorrect.
Incorrect: AWS Global Accelerator is unrelated to Direct Connect or BGP and cannot act as a BGP route reflector.