2V0-41.24 Question 389
Select 4You are tasked with deploying a Tier-0 gateway in an NSX-T environment to support site-to-site VPN connectivity between your on-premises datacenter and a remote site. The Tier-0 gateway must handle both north-south traffic and VPN services. Which of the following steps are required to successfully deploy and configure the Tier-0 gateway and associated segments for VPN support?
- A
Configure a logical segment and attach it to the Tier-0 gateway for external connectivity.
- B
Enable the Tier-0 gateway as an Edge Cluster member and configure a service interface for VPN traffic.
- C
Create a local endpoint, configure a VPN session, and assign it to the Tier-0 gateway.
- D
Deploy a Tier-1 gateway and connect it to the Tier-0 gateway for VPN functionality.
- E
Enable route redistribution between the Tier-0 gateway and the connected segments.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To configure a Tier-0 gateway for VPN support, you must ensure external connectivity by attaching a logical segment, enable the gateway as part of an Edge Cluster to support advanced services, and configure the necessary VPN settings such as endpoints and sessions. Route redistribution is also required to propagate routes among the Tier-0 gateway, VPN peers, and connected segments. A Tier-1 gateway is not needed for this use case, as the Tier-0 gateway directly handles VPN functionality.
- A. Correct.
Correct: A logical segment is required for external connectivity to route traffic between the Tier-0 gateway and the physical network.
- B. Correct.
Correct: The Tier-0 gateway must be backed by an Edge Cluster to support advanced services like VPN. A service interface is needed for handling VPN traffic.
- C. Correct.
Correct: VPN functionality requires a local endpoint and a configured VPN session, which are then associated with the Tier-0 gateway.
- D. Incorrect.
Incorrect: A Tier-1 gateway is not required for enabling VPN functionality on a Tier-0 gateway. Tier-1 gateways are typically used for east-west traffic and tenant isolation.
- E. Correct.
Correct: Route redistribution must be enabled to ensure that routes learned from VPN peers or other sources are propagated to the connected segments and vice versa.