2V0-41.24 Question 368
Select 3An organization is deploying a new application that requires a dedicated network segment and specific public IP address translation for external connectivity. As a Network Administrator, you need to configure a Tier-1 Gateway and a segment in VMware NSX to meet these requirements. Which steps should you follow to achieve this?
- A
Create a new Tier-1 Gateway and enable NAT services.
- B
Create a new segment, attach it to the newly created Tier-1 Gateway, and assign it a subnet.
- C
Configure a DNAT rule on the Tier-1 Gateway to translate public IP traffic to the private IP of the application.
- D
Associate the segment with an existing Tier-0 Gateway for external connectivity.
- E
Enable DHCP services on the Tier-1 Gateway to provide IP addresses to the segment.
Show answer and explanation
Correct answers: A, B, C
Explanation
To deploy a new application with external connectivity, a Tier-1 Gateway must be created to handle NAT services. A segment is required for the application's local network, which needs to be attached to the Tier-1 Gateway. Additionally, a DNAT rule must be configured on the Tier-1 Gateway to translate the public IP to the application's private IP. Attaching the segment directly to a Tier-0 Gateway bypasses the NAT functionality, and enabling DHCP is optional based on the IP management strategy.
- A. Correct.
Correct: A new Tier-1 Gateway must be created, and NAT services need to be enabled to support Network Address Translation for external connectivity.
- B. Correct.
Correct: A segment must be created and attached to the Tier-1 Gateway with an assigned subnet for local application traffic.
- C. Correct.
Correct: A DNAT rule is required on the Tier-1 Gateway to translate the external public IP traffic to the private IP address of the application.
- D. Incorrect.
Incorrect: A segment should be attached to a Tier-1 Gateway, not directly to a Tier-0 Gateway. The Tier-1 Gateway provides the necessary NAT functionality before connecting upstream to the Tier-0 Gateway.
- E. Incorrect.
Incorrect: DHCP services are not explicitly required in this scenario, as the focus is on NAT and segment creation. IP addressing can be managed through static assignment or other methods.