Google Professional Cloud Network Engineer Question 706
Select 4Google Cloud PlatformYou are tasked with deploying a Router Appliance (RA) in Google Cloud to integrate your on-premises network with a virtualized network appliance hosted in a Compute Engine VM. The Router Appliance must support dynamic routing to automatically exchange routes between your on-premises network and the cloud environment. Which of the following steps are required to correctly set up the Router Appliance?
- A
Create a Compute Engine VM and install a third-party network appliance that supports BGP.
- B
Configure a Cloud Router to peer with the Router Appliance using a BGP session.
- C
Create a Cloud NAT instance and associate it with the Cloud Router.
- D
Attach a VPC network to the Cloud Router to enable route propagation.
- E
Enable firewall rules to allow BGP traffic (TCP port 179) between the on-premises network and the Router Appliance.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
Setting up a Router Appliance involves deploying a Compute Engine VM with a third-party network appliance that supports BGP. A Cloud Router is configured to peer with the Router Appliance, and a VPC network is attached to the Cloud Router to enable route propagation. Additionally, firewall rules must be configured to allow BGP traffic (TCP port 179). Cloud NAT is not required for this specific setup as it is unrelated to routing or BGP communication.
- A. Correct.
Correct. The Router Appliance is typically a VM running a third-party network appliance that supports dynamic routing protocols like BGP.
- B. Correct.
Correct. A Cloud Router is required to establish a BGP session with the Router Appliance, enabling dynamic route exchange.
- C. Incorrect.
Incorrect. Cloud NAT is not required for setting up a Router Appliance. It is used for outbound internet access for private resources, which is unrelated to this scenario.
- D. Correct.
Correct. A VPC network must be attached to the Cloud Router so that learned routes can propagate within the VPC.
- E. Correct.
Correct. Firewall rules must be configured to allow BGP traffic (TCP port 179) to ensure proper communication between the on-premises network and the Router Appliance.