2V0-21.23 Question 179
Single answerA VMware administrator is tasked with configuring advanced virtual networking options on a Virtual Standard Switch (VSS). The administrator needs to ensure that virtual machines connected to the VSS can communicate across different VLANs while maintaining security and isolation. Which configuration should the administrator implement?
- A
Enable promiscuous mode on the VSS and configure VLAN IDs on each virtual machine
- B
Configure VLAN tagging at the port group level with the appropriate VLAN IDs
- C
Enable traffic shaping and set specific bandwidth limits for each port group
- D
Create separate Virtual Standard Switches for each VLAN and connect virtual machines accordingly
Show answer and explanation
Correct answer: B
Explanation
To enable virtual machines connected to a Virtual Standard Switch (VSS) to communicate across different VLANs securely, VLAN tagging should be configured at the port group level. This approach ensures proper traffic segregation, routing, and security without unnecessary complexity or compromises in manageability.
- A. Incorrect.
Enabling promiscuous mode allows all traffic to be visible to virtual machines connected to the port group, which is not a recommended approach for VLAN communication as it violates security and isolation requirements.
- B. Correct.
Configuring VLAN tagging at the port group level with appropriate VLAN IDs is the correct approach. This ensures that traffic is tagged and routed properly while maintaining VLAN isolation and security.
- C. Incorrect.
Traffic shaping controls bandwidth usage but does not address VLAN communication or tagging requirements.
- D. Incorrect.
Creating separate Virtual Standard Switches for each VLAN is not efficient and increases management overhead. VLAN tagging at the port group level is a more scalable and manageable solution.