2V0-41.24 Question 154
Select 3An organization is deploying VMware NSX-T and wants to use VRF Lite to segment traffic for multiple tenants while maintaining routing isolation. Which of the following are benefits of using VRF Lite in this scenario?
- A
Enables routing isolation between tenants without requiring multiple physical routers.
- B
Reduces the need for BGP or OSPF configuration within the tenant's routing domains.
- C
Allows tenants to share the same IP address space without conflict.
- D
Provides encryption for all tenant traffic by default.
- E
Simplifies network segmentation while supporting scalability.
Show answer and explanation
Correct answers: A, C, E
Explanation
VRF Lite is a powerful feature in VMware NSX-T that enables logical segmentation and routing isolation for multi-tenant environments. It allows tenants to use overlapping IP address spaces and provides scalability by using virtual routing instances instead of requiring physical routers. However, it does not inherently provide encryption or eliminate the need for dynamic routing protocols like BGP or OSPF in complex networks.
- A. Correct.
Correct: VRF Lite enables routing isolation by creating separate virtual routing tables for each tenant, avoiding the need for multiple physical routers.
- B. Incorrect.
Incorrect: VRF Lite does not eliminate the need for routing protocols like BGP or OSPF; these protocols may still be required for dynamic routing in tenant networks.
- C. Correct.
Correct: VRF Lite allows tenants to use overlapping IP address spaces because each tenant is isolated in its own virtual routing table.
- D. Incorrect.
Incorrect: VRF Lite does not provide encryption for tenant traffic by default. Additional mechanisms like IPsec or NSX-T's built-in security features would be needed for encryption.
- E. Correct.
Correct: VRF Lite simplifies network segmentation by allowing logical separation within the same physical infrastructure, and it scales effectively for multi-tenant environments.