2V0-41.24 Question 147
Select 3An organization is using VMware NSX-T and wants to create isolated routing domains on a single T0 Gateway to support multi-tenancy. They plan to use VRF Lite for this purpose. Which of the following considerations are correct when configuring VRF Lite in NSX-T?
- A
Each VRF requires its own unique route distinguisher (RD) and route target (RT).
- B
A separate Tier-1 Gateway is required for each VRF Lite instance.
- C
VRF Lite allows overlapping IP address spaces between tenants.
- D
Each VRF Lite instance operates in its own separate Layer 3 routing domain.
- E
VRF Lite requires a dedicated physical NIC for each VRF on the Tier-0 Gateway.
Show answer and explanation
Correct answers: A, C, D
Explanation
VRF Lite in NSX-T is used to create isolated Layer 3 routing domains on a single Tier-0 Gateway, enabling multi-tenancy and support for overlapping IP address spaces. Each VRF requires unique route distinguishers and route targets to segregate routing information. Unlike physical networking, VRF Lite in NSX-T achieves segmentation at the software level and does not require additional physical NICs or separate Tier-1 Gateways for each VRF.
- A. Correct.
Correct: Each VRF in NSX-T requires its own unique RD and RT to differentiate routes and maintain separation of routing information between tenants.
- B. Incorrect.
Incorrect: VRF Lite operates at the Tier-0 Gateway level, and multiple VRFs can share a single Tier-0 Gateway without requiring separate Tier-1 Gateways for each VRF.
- C. Correct.
Correct: VRF Lite supports overlapping IP address spaces between tenants because each VRF operates in an isolated Layer 3 routing domain.
- D. Correct.
Correct: Each VRF Lite instance creates its own distinct Layer 3 routing table and operates independently, ensuring tenant traffic is isolated.
- E. Incorrect.
Incorrect: VRF Lite does not require dedicated physical NICs for each VRF. Routing separation is achieved logically at the software level.