2V0-41.24 Question 351
Select 4An organization is deploying a multi-tenancy environment using VMware NSX-T. They need to create isolated routing domains for each tenant while using the same IP address ranges across tenants. Which steps are required to deploy and configure VRF gateways in this scenario?
- A
Create a Tier-0 gateway and configure VRF instances under it for each tenant.
- B
Assign overlapping IP address spaces to each VRF instance.
- C
Configure unique Route Target (RT) values for each VRF instance to ensure route isolation.
- D
Enable BGP on each VRF instance and advertise tenant-specific routes.
- E
Directly assign each VRF instance to a Tier-1 gateway.
Show answer and explanation
Correct answers: A, B, C, D
Explanation
To deploy and configure VRF gateways in VMware NSX-T, you first create a Tier-0 gateway and configure VRF instances under it. VRF instances enable isolated routing domains, which can support overlapping IP address spaces. To ensure proper route isolation and exchange, unique Route Target (RT) values are configured for each VRF instance, and BGP may be enabled to advertise tenant-specific routes. Tier-1 gateways do not directly host VRF instances but can connect indirectly through the Tier-0 gateway.
- A. Correct.
Correct. A Tier-0 gateway is required to host VRF instances. Each VRF instance acts as an isolated routing domain under the Tier-0 gateway.
- B. Correct.
Correct. VRF instances allow overlapping IP address spaces across tenants, ensuring each tenant has its isolated routing table.
- C. Correct.
Correct. Route Targets (RTs) are used to manage route import/export policies and ensure proper route isolation for each VRF instance.
- D. Correct.
Correct. BGP can be enabled on each VRF instance to allow route advertisement and ensure tenant-specific routes are exchanged appropriately.
- E. Incorrect.
Incorrect. VRF instances are configured under a Tier-0 gateway and cannot be directly assigned to Tier-1 gateways. Tier-1 gateways can, however, connect to VRF instances indirectly through the Tier-0 gateway.