2V0-41.24 Question 125
Single answerAn organization is using NSX-T Data Center to deploy a multi-tenant environment with a Tier-0 gateway. Each tenant requires isolation for its routing and networking resources while sharing the same physical infrastructure. Which configuration on the Tier-0 gateway ensures proper multi-tenancy and isolation?
- A
Enable VRF (Virtual Routing and Forwarding) instances on the Tier-0 gateway.
- B
Configure a single Tier-0 gateway shared across all tenants without segmentation.
- C
Implement NAT rules to isolate tenant traffic at the Tier-0 gateway.
- D
Utilize multiple Tier-0 gateways for each tenant to achieve isolation.
Show answer and explanation
Correct answer: A
Explanation
In a multi-tenant environment, VRF (Virtual Routing and Forwarding) instances on a Tier-0 gateway allow for isolated routing domains for each tenant while sharing the same physical infrastructure. This approach ensures scalability, proper traffic separation, and efficient resource usage without the need to deploy multiple Tier-0 gateways, which would increase operational complexity and resource consumption.
- A. Correct.
Correct: VRF (Virtual Routing and Forwarding) instances enable the Tier-0 gateway to operate in a multi-tenant mode by providing isolated routing tables for each tenant while sharing the same physical gateway, ensuring proper isolation and scalability.
- B. Incorrect.
Incorrect: A single Tier-0 gateway without segmentation does not provide tenant isolation. All tenants would share the same routing table, leading to traffic conflicts and a lack of separation.
- C. Incorrect.
Incorrect: While NAT can help in some isolation scenarios, it does not provide true routing isolation for tenants. It is not the recommended approach for multi-tenancy in Tier-0 gateways.
- D. Incorrect.
Incorrect: Configuring multiple Tier-0 gateways for each tenant is not scalable or efficient in a multi-tenant environment. The preferred solution is to use VRF instances on a shared Tier-0 gateway.