2V0-41.24 Question 359
Select 2You are tasked with deploying a new multi-tenant network architecture for a customer. Each tenant needs to have isolated network segments connected to their own Tier-1 gateway. You also need to attach virtual machines (VMs) to specific segments within each tenant's VRF instance. After creating the Tier-1 gateways and segments, what steps should you take to achieve this configuration?
- A
Configure VRF instances on the Tier-0 gateway and associate each Tier-1 gateway with the corresponding VRF.
- B
Create segments under each Tier-1 gateway and ensure they are tagged with unique VLAN IDs for isolation.
- C
Attach the VMs to the appropriate segments via their network adapter settings in the vSphere Client.
- D
Enable route advertisement on the Tier-1 gateways to ensure connectivity to the Tier-0 gateway.
- E
Assign each segment to the corresponding VRF using the NSX Manager interface.
Show answer and explanation
Correct answers: A, C
Explanation
To properly implement isolated tenant networks, VRF instances must be configured on the Tier-0 gateway, with Tier-1 gateways associated to these VRFs. This ensures tenant isolation and routing. VMs must be attached to the appropriate segments via their network adapter settings in the vSphere Client to establish connectivity within their segments. The other options either describe unrelated tasks or are not required for this specific scenario.
- A. Correct.
Correct: VRF instances on the Tier-0 gateway ensure proper traffic isolation and routing for each tenant. Associating Tier-1 gateways with VRFs is a required step in this scenario.
- B. Incorrect.
Incorrect: While creating segments is necessary, VLAN tagging is not required in this specific context as NSX segments provide isolation inherently without VLAN IDs.
- C. Correct.
Correct: Attaching VMs to the appropriate segments via their network adapter settings is essential for ensuring they communicate within their assigned network.
- D. Incorrect.
Incorrect: Enabling route advertisement on Tier-1 gateways is useful for connectivity but is not required for attaching VMs to segments or setting up VRF isolation.
- E. Incorrect.
Incorrect: Segments are inherently associated with their Tier-1 gateway. Directly assigning segments to VRFs is not part of the NSX-T workflow.