2V0-41.24 Question 453
Single answerAn administrator is troubleshooting a connectivity issue in a VMware NSX-T Data Center environment. A newly deployed VM in a Tier-1 logical segment cannot reach a web server located on another logical segment connected to the same Tier-1 gateway. The administrator confirms that both VMs are on the correct segments, and the Tier-1 gateway is connected to a Tier-0 gateway with proper uplink configuration. Which step should the administrator take next to resolve the issue?
- A
Verify that the Distributed Firewall (DFW) rules are not blocking traffic between the two VMs.
- B
Check if the MAC address table on the ESXi host includes the correct entries for the VMs.
- C
Ensure that the Edge Transport Node has the correct BGP configuration.
- D
Verify that the logical ports for the VMs are operational and have the correct VLAN tagging.
Show answer and explanation
Correct answer: A
Explanation
In this scenario, the issue lies within the NSX-T environment where east-west traffic between VMs on the same Tier-1 gateway is failing. The most likely cause is a Distributed Firewall (DFW) rule blocking the traffic. Verifying and adjusting the DFW rules is a crucial troubleshooting step to resolve this issue, as other options are either unrelated or not applicable given the details of the scenario.
- A. Correct.
Distributed Firewall (DFW) rules can block traffic even if the VMs and segments are correctly configured. This is a critical step in troubleshooting connectivity within NSX-T.
- B. Incorrect.
The MAC address table is irrelevant in this case, as NSX-T uses overlay networking and logical switching, not traditional MAC-based switching.
- C. Incorrect.
BGP configuration on the Edge Transport Node is only relevant for north-south traffic or external routing, not east-west traffic between VMs on the same Tier-1 gateway.
- D. Incorrect.
Logical ports for VMs in NSX-T are not VLAN-tagged unless specifically configured for VLAN-backed segments, which is not mentioned in the scenario.