2V0-41.24 Question 398
Select 3An organization is deploying an NSX autonomous Edge to act as an L2 VPN client for extending a VLAN to a branch office. The administrator has already deployed and configured the autonomous Edge. Which of the following steps are required to configure the autonomous Edge to connect as an L2 VPN client?
- A
Configure the L2 VPN client settings on the autonomous Edge, including the server address and certificate.
- B
Enable the L2 VPN client mode on the autonomous Edge and associate it with a configured segment.
- C
Assign the same IP address range to the autonomous Edge as used by the data center's L2 VPN server.
- D
Ensure the L2 VPN server certificate is trusted by the autonomous Edge.
- E
Configure a static route on the autonomous Edge to the L2 VPN server.
Show answer and explanation
Correct answers: A, B, D
Explanation
To configure a pre-deployed autonomous Edge as an L2 VPN client, administrators must set up the L2 VPN client settings, enable client mode, associate it with a segment, and ensure trust of the server's certificate. These steps ensure the autonomous Edge can securely connect to the L2 VPN server and extend Layer 2 connectivity. Additional steps, such as static routing, are unnecessary for the L2 VPN client setup, as it primarily operates at Layer 2.
- A. Correct.
Correct. The L2 VPN client settings, such as the server address and certificate, must be configured on the autonomous Edge to establish a connection.
- B. Correct.
Correct. Enabling L2 VPN client mode and associating it with a segment is necessary for the Edge to function as an L2 VPN client.
- C. Incorrect.
Incorrect. The IP address ranges for the autonomous Edge and the L2 VPN server do not need to be the same. In fact, they are typically different to avoid conflicts.
- D. Correct.
Correct. The autonomous Edge must trust the server's certificate to establish a secure L2 VPN tunnel.
- E. Incorrect.
Incorrect. While routing configurations may be required in some scenarios, static routes are not typically needed for the L2 VPN client setup as the VPN creates a direct Layer 2 extension.