AZ-700 Question 143
Select 2You are configuring a site-to-site VPN connection between your on-premises router and an Azure VPN gateway. You need faster detection of link failures when routing through BGP. After enabling BGP on both your on-premises router and the Azure VPN gateway, you notice that bidirectional forwarding detection (BFD) is not reducing failover times as expected. Which two actions should you take to correctly implement BFD in this scenario?
- A
Use at least a VpnGw1 or higher SKU for your Azure VPN gateway with a route-based configuration.
- B
Enable the BFD toggle from the VPN gateway settings in the Azure Portal.
- C
Set the local and remote BFD timers on your on-premises router to values that are supported and negotiated by Azure.
- D
Disable BGP on the Azure VPN gateway, as BFD does not depend on BGP for route failure detection.
Show answer and explanation
Correct answers: A, C
Explanation
To successfully enable BFD for faster path failure detection, you need a route-based Azure VPN gateway with an appropriate SKU (VpnGw1 or higher), and you must configure matching BFD timers on your on-premises device that align with Azure� negotiation settings. BFD uses BGP to exchange neighbor information, so disabling BGP or using a lower-tier (policy-based) VPN gateway will prevent BFD from working as intended. For more detail, refer to the official Microsoft documentation on configuring BGP and BFD with Azure VPN gateways: https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-bgp-overview.
- A. Correct.
Correct. Azure VPN gateway supports BFD on route-based gateways with SKU VpnGw1 or higher. A lower-tier or policy-based gateway does not support BFD.
- B. Incorrect.
Incorrect. There is no specific BFD 'toggle' in the Azure Portal. BFD is automatically negotiated if your on-premises device is configured properly and the Azure VPN gateway supports it.
- C. Correct.
Correct. You must configure matching or compatible BFD timers on your on-premises router that align with Azure� BFD capabilities so that BFD can establish sessions and detect failures properly.
- D. Incorrect.
Incorrect. BFD is only available when BGP is enabled. Disabling BGP would prevent you from using BFD for faster path failure detection.