2V0-41.24 Question 347
Single answerAn organization wants to isolate multiple tenant networks on their NSX-T Data Center without deploying multiple Tier-1 Gateways. They decide to use VRF Lite to achieve network segmentation. After configuring a new VRF instance, which step is essential to ensure traffic from the VRF can reach external networks?
- A
Configure a Tier-0 Gateway and associate it with the VRF instance
- B
Enable Route Redistribution between the VRF instance and the Tier-1 Gateway
- C
Associate the VRF instance with a dedicated uplink interface
- D
Create a logical switch and connect it to the VRF instance
Show answer and explanation
Correct answer: A
Explanation
To ensure external connectivity for a VRF instance in NSX-T, it must first be associated with a Tier-0 Gateway. This configuration enables the VRF to utilize the Tier-0's uplink interfaces for routing external traffic. The other options, while related to VRF Lite or NSX-T routing in general, do not directly address the requirement for external connectivity.
- A. Correct.
Correct. A VRF instance is a child object of a Tier-0 Gateway, and it must be associated with a Tier-0 Gateway to enable external connectivity.
- B. Incorrect.
Incorrect. Route redistribution is necessary for routing between VRF instances or other routing domains but does not directly establish external connectivity.
- C. Incorrect.
Incorrect. While uplink interfaces are important, simply associating them with a VRF instance does not establish the connection to external networks. The Tier-0 Gateway must first be configured.
- D. Incorrect.
Incorrect. Logical switches are used to connect VMs and other workloads but are not directly involved in enabling external connectivity for VRF instances.