2V0-41.24 Question 202
Select 2An organization is deploying an NSX-based Layer 2 VPN to extend their on-premises network to a public cloud environment. Their requirements include extending VLANs across sites, supporting workloads on both sites with seamless communication, and maintaining the same IP addressing scheme. Which of the following are accurate considerations or features of NSX Layer 2 VPN technology that meet these requirements?
- A
NSX Layer 2 VPN requires an Edge Services Gateway (ESG) to function as the Client or Server.
- B
NSX Layer 2 VPN can extend Layer 2 networks over both Layer 3 and Layer 2 transport protocols.
- C
NSX Layer 2 VPN can provide encryption for data in transit between the sites.
- D
NSX Layer 2 VPN requires all workloads to be located on the same subnet at the source site.
- E
NSX Layer 2 VPN supports seamless failover and dynamic routing between sites.
Show answer and explanation
Correct answers: A, C
Explanation
NSX Layer 2 VPN enables the extension of Layer 2 networks across sites, allowing organizations to maintain consistent IP addressing schemes and facilitate seamless workload migration. It requires an Edge Services Gateway (ESG) to establish the VPN connection and provides encryption to secure data in transit. While it does not support Layer 2 over Layer 2 transport or inherently provide seamless failover and dynamic routing, these features can be implemented through complementary configurations.
- A. Correct.
NSX Layer 2 VPN requires an Edge Services Gateway (ESG) to act as the Client or Server, as it is the component responsible for establishing the VPN connection and managing Layer 2 extension functionality.
- B. Incorrect.
NSX Layer 2 VPN extends Layer 2 networks over a Layer 3 transport protocol, not Layer 2. This allows VLANs to be extended across geographically separated sites using Layer 3 connectivity.
- C. Correct.
NSX Layer 2 VPN includes encryption capabilities, such as IPsec, to secure data in transit between the sites, ensuring the confidentiality of transmitted information.
- D. Incorrect.
NSX Layer 2 VPN does not mandate that all workloads be on the same subnet at the source site. It simply extends the Layer 2 network, allowing for the same IP addressing scheme to be used across the sites.
- E. Incorrect.
NSX Layer 2 VPN extends the Layer 2 network and does not inherently provide seamless failover or dynamic routing between sites. These functions would require additional configurations or technologies, such as dynamic routing protocols or NSX-T Federation.