2V0-41.24 Question 345
Single answerAn enterprise is deploying VRF Lite in their NSX-T environment to isolate multiple tenants' traffic. The network administrator has already created separate Tier-0 gateways for each tenant. What is the next step required to configure VRF Lite to ensure traffic isolation for each tenant?
- A
Create VRF instances for each tenant and associate them with the respective Tier-0 gateways.
- B
Enable BGP on the Tier-0 gateway and advertise routes for each tenant.
- C
Configure static routes for each tenant on the Tier-1 gateway.
- D
Assign different VLANs to each tenant on the ESXi hosts.
Show answer and explanation
Correct answer: A
Explanation
VRF Lite in NSX-T allows for traffic isolation by creating multiple VRF instances on Tier-0 gateways. These instances act as separate routing domains for tenants. Once VRF instances are created and associated with the Tier-0 gateways, additional configurations, such as BGP or static routes, can be applied to meet specific routing requirements.
- A. Correct.
Correct. Creating VRF instances and associating them with Tier-0 gateways is necessary to isolate traffic and enable proper routing for each tenant.
- B. Incorrect.
Incorrect. While enabling BGP can be part of the overall network design, it is not the immediate next step for configuring VRF Lite. VRF instances must first be created and associated with Tier-0 gateways.
- C. Incorrect.
Incorrect. Static routes are not directly related to the VRF Lite configuration process. The focus here is on creating VRF instances for tenant isolation.
- D. Incorrect.
Incorrect. Assigning different VLANs to tenants is a networking practice but is not specific to configuring VRF Lite in NSX-T.