2V0-41.24 Question 387
Select 3An organization is deploying a new Tier-0 gateway in their NSX-T environment to support site-to-site VPN connectivity. The network administrator has already created the Tier-0 gateway and needs to configure it for VPN support. Which of the following steps must be performed to ensure successful VPN functionality?
- A
Attach an external interface to the Tier-0 gateway and configure its IP address.
- B
Enable route redistribution between connected segments and the Tier-0 gateway.
- C
Deploy a Tier-1 gateway for managing VPN traffic.
- D
Create a VPN profile and configure a local endpoint on the Tier-0 gateway.
- E
Attach the Tier-0 gateway to the physical uplink network.
Show answer and explanation
Correct answers: A, D, E
Explanation
To enable VPN functionality on a Tier-0 gateway, it must have an external interface with an IP address, a VPN profile and local endpoint for defining the connection, and physical uplink connectivity. These steps ensure that the Tier-0 gateway can establish and manage VPN traffic. Other options like route redistribution and deploying a Tier-1 gateway are not mandatory for VPN setup but may be required for other functionalities in the network.
- A. Correct.
Attaching an external interface to the Tier-0 gateway and assigning an IP address is necessary for the gateway to connect to external networks and participate in VPN traffic.
- B. Incorrect.
While route redistribution is important for propagating routes, it is not a mandatory step specifically for enabling VPN functionality.
- C. Incorrect.
A Tier-1 gateway is not required solely for VPN functionality, as the Tier-0 gateway itself can handle VPN configurations.
- D. Correct.
A VPN profile and a local endpoint are required to define the VPN parameters and establish the connection on the Tier-0 gateway.
- E. Correct.
Attaching the Tier-0 gateway to the physical uplink network ensures connectivity with external networks, which is critical for site-to-site VPN.