2V0-41.24 Question 316
Select 4A network administrator is tasked with deploying a Tier-0 gateway in a VMware NSX environment to connect the on-premises network to an external router using OSPF as the dynamic routing protocol. After configuring the Tier-0 gateway, the administrator observes that OSPF neighbor relationships are not forming with the external router. Which of the following steps must the administrator verify and configure to resolve the issue?
- A
Ensure that the Tier-0 gateway's OSPF area matches the external router's OSPF area.
- B
Verify that the Tier-0 gateway is configured with an active Edge Cluster.
- C
Enable OSPF on the Tier-0 gateway's uplink interfaces and assign them to the correct OSPF area.
- D
Ensure that OSPF authentication settings match between the Tier-0 gateway and the external router.
- E
Configure NSX Distributed Firewall rules to explicitly allow OSPF packets between the Tier-0 gateway and the external router.
Show answer and explanation
Correct answers: A, B, C, D
Explanation
For OSPF neighbor adjacencies to form between the Tier-0 gateway and the external router, several conditions must be met: both devices must use the same OSPF area, the Tier-0 gateway must be assigned to an active Edge Cluster, OSPF must be enabled and configured correctly on the gateway's uplink interfaces, and OSPF authentication settings must match. While NSX Distributed Firewall rules can control traffic, they do not block OSPF by default, so configuring explicit firewall rules is not required unless custom restrictions are present.
- A. Correct.
Correct. OSPF neighbors must belong to the same OSPF area for the adjacency to form. Mismatched areas will prevent neighbor relationships.
- B. Correct.
Correct. The Tier-0 gateway must have an Edge Cluster assigned to perform routing and dynamic protocol operations such as OSPF.
- C. Correct.
Correct. OSPF must be explicitly enabled on the Tier-0 gateway's uplink interfaces, and these interfaces need to be associated with the appropriate OSPF area.
- D. Correct.
Correct. OSPF authentication settings, such as passwords or authentication types, must match between neighbors for adjacencies to form.
- E. Incorrect.
Incorrect. OSPF traffic is allowed by default in NSX environments, and no additional Distributed Firewall rules are required unless explicitly restricted.