2V0-41.24 Question 353
Select 3You are tasked with deploying and configuring VRF gateways in an NSX-T environment to enable multi-tenancy for two separate tenants, Tenant-A and Tenant-B. Each tenant requires isolated routing tables and their own logical switch connectivity. After deploying the VRF gateways, what additional configuration steps must you take to ensure proper isolation and connectivity for both tenants?
- A
Assign distinct interface IP addresses for each VRF gateway on the same Tier-0 router.
- B
Configure static or dynamic routing protocols (e.g., BGP or OSPF) separately for each VRF gateway.
- C
Enable traffic isolation by assigning the same VLAN ID to both tenants' VRF gateways.
- D
Connect each VRF gateway to its respective logical switch for tenant-specific traffic.
- E
Configure a shared routing table across both VRF gateways to simplify management.
Show answer and explanation
Correct answers: A, B, D
Explanation
To deploy and configure VRF gateways properly, each VRF must have a unique interface IP address, separate routing protocols for tenant-specific routes, and isolated connectivity through distinct logical switches. These configurations ensure that tenant traffic remains isolated while enabling multi-tenancy routing functionality. Misconfigurations, such as sharing VLANs or routing tables, would break isolation and lead to potential network issues.
- A. Correct.
Correct: Each VRF gateway requires its own unique interface IP address on the Tier-0 router to ensure proper routing and isolation.
- B. Correct.
Correct: VRF gateways need to have routing protocols configured separately to handle tenant-specific routes and maintain multi-tenancy.
- C. Incorrect.
Incorrect: Assigning the same VLAN ID to both tenants would compromise traffic isolation, defeating the purpose of VRF gateways.
- D. Correct.
Correct: Each VRF gateway must connect to a dedicated logical switch to ensure tenant-specific traffic remains isolated.
- E. Incorrect.
Incorrect: A shared routing table is not compatible with the principles of VRF, as they require separate routing tables to provide tenant isolation.