2V0-41.24 Question 357
Select 4An organization is deploying a multi-tier application and has already created a Tier-1 gateway in their NSX-T Data Center environment. The application consists of two segments: 'Web-Segment' and 'App-Segment.' Additionally, the organization is using VRFs to logically isolate network traffic. Which of the following steps are required to ensure that VMs on the 'Web-Segment' and 'App-Segment' can communicate through the Tier-1 gateway and remain logically isolated within their VRF?
- A
Create the 'Web-Segment' and 'App-Segment' and attach them to the Tier-1 gateway.
- B
Assign the segments to the same VRF associated with the Tier-1 gateway.
- C
Configure the VMs to connect to the segments and verify correct IP addressing within the VRF.
- D
Directly attach the VMs to the Tier-1 gateway without using segments.
- E
Enable route advertisement on the Tier-1 gateway to propagate segment routes to the VRF.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To ensure proper communication between VMs on the 'Web-Segment' and 'App-Segment' through the Tier-1 gateway while maintaining traffic isolation within a VRF, segments must be created and attached to the Tier-1 gateway. These segments need to be associated with the same VRF, and VMs must be connected to these segments with appropriate IP addressing. Route advertisement must also be enabled on the Tier-1 gateway to propagate the required routes. Direct attachment of VMs to the Tier-1 gateway is not supported in NSX-T.
- A. Correct.
Creating and attaching the segments to the Tier-1 gateway is necessary to ensure connectivity between the segments and the gateway.
- B. Correct.
Assigning the segments to the same VRF ensures that the network traffic remains logically isolated within the specified VRF context.
- C. Correct.
VMs must be connected to the appropriate segments, and their IP configuration must align with the VRF to enable proper communication.
- D. Incorrect.
Directly attaching VMs to the Tier-1 gateway is not valid in NSX-T; VMs must connect to segments, which in turn connect to the Tier-1 gateway.
- E. Correct.
Route advertisement on the Tier-1 gateway ensures that the segment routes are propagated, enabling communication within the VRF.