2V0-41.24 Question 199
Select 3An organization is using VMware NSX to extend its Layer 2 network between two geographically separated data centers to support a workload migration. The administrator has configured an L2 VPN service on the NSX Edge device but notices that VMs in the remote data center cannot communicate with the on-premises network. What could be the cause of this issue?
- A
The L2 VPN service on the NSX Edge has not been enabled.
- B
The required firewall rules to allow L2 VPN traffic are not configured.
- C
The MTU size on the transport network is set too low.
- D
The NSX Edge appliance is not in the same Layer 3 network as the remote data center.
- E
The VXLAN Tunnel Endpoint (VTEP) IP address is misconfigured.
Show answer and explanation
Correct answers: A, B, C
Explanation
To troubleshoot L2 VPN connectivity issues, it is important to verify that the L2 VPN service is enabled, the necessary firewall rules are in place to allow the traffic, and the MTU size on the transport network is adequate to handle the encapsulated packets. L2 VPN operates over Layer 3 networks and does not rely on VXLAN Tunnel Endpoints (VTEPs), so these factors can be eliminated as potential causes in this scenario.
- A. Correct.
If the L2 VPN service is not enabled on the NSX Edge, the VPN will not function, preventing connectivity between the two locations.
- B. Correct.
Firewall rules must be configured to allow L2 VPN traffic. If these rules are missing, traffic will be blocked, leading to communication issues.
- C. Correct.
An MTU size that is too low may cause packet fragmentation or drops, which can disrupt L2 VPN traffic and prevent successful communication.
- D. Incorrect.
The NSX Edge appliance does not need to be in the same Layer 3 network as the remote data center for L2 VPN to function. L2 VPN is designed to operate over Layer 3 networks.
- E. Incorrect.
VXLAN Tunnel Endpoint (VTEP) IP addresses are used for overlay traffic in NSX-T environments but are not directly relevant to L2 VPN functionality. Misconfiguration of VTEP IP addresses would not typically cause L2 VPN issues.