2V0-41.24 Question 198
Select 3An organization has a main data center and two remote branches connected via NSX-T Data Center. The administrator is tasked with configuring an L2 VPN to extend the Layer 2 network between the main data center and the branches, ensuring seamless VM migration and application consistency. Which of the following requirements must be met to successfully configure the L2 VPN?
- A
The L2 VPN server must be deployed on an NSX Edge node.
- B
The L2 VPN client must use the same subnet as the L2 VPN server.
- C
A trunk segment must be configured to support multiple VLANs over the L2 VPN.
- D
The L2 VPN must use SSL certificates for establishing secure connections.
- E
The remote branches must have NSX-T installed to act as L2 VPN clients.
Show answer and explanation
Correct answers: A, C, D
Explanation
To configure an L2 VPN in NSX-T, the L2 VPN server must be deployed on an NSX Edge node, and secure connections are established using SSL certificates. For extending multiple VLANs, a trunk segment is necessary. The L2 VPN client does not need to share the same subnet as the server, nor is it mandatory for remote branches to run NSX-T, as other L2 VPN clients can be utilized.
- A. Correct.
Correct: The L2 VPN server must be deployed on an NSX Edge node, as it provides the necessary capabilities to extend Layer 2 networks.
- B. Incorrect.
Incorrect: The L2 VPN client does not need to use the same subnet as the L2 VPN server. The L2 VPN extends Layer 2 networks, making subnet alignment unnecessary.
- C. Correct.
Correct: A trunk segment is required when extending multiple VLANs over the L2 VPN to ensure proper VLAN tagging and forwarding.
- D. Correct.
Correct: SSL certificates are used to establish secure connections between the L2 VPN server and client, ensuring data encryption and integrity.
- E. Incorrect.
Incorrect: It is not mandatory for the remote branches to have NSX-T installed. They can use a standalone L2 VPN client, such as OpenVPN, to connect to the L2 VPN server.