2V0-41.24 Question 455
Select 2A network administrator is troubleshooting a connectivity issue in an NSX-T Data Center environment. A new virtual machine (VM) cannot communicate with other VMs in the same segment. The administrator has verified the following:
- The VM is connected to the correct segment.
- The segment is connected to a Tier-1 Gateway.
- The Tier-1 Gateway is properly linked to a Tier-0 Gateway.
- The VM has the correct IP address configuration.
Which of the following steps should the administrator take to resolve the issue?
- A
Verify that the Distributed Firewall (DFW) rules are not blocking traffic for the VM.
- B
Check if the Virtual Distributed Switch (VDS) uplinks have sufficient bandwidth for traffic.
- C
Ensure the Edge nodes are in an active state and have connectivity to the physical network.
- D
Inspect the ARP table on the VM to confirm that the MAC address of the destination VM is resolved.
- E
Verify that the segment’s VLAN ID matches the VLAN configuration on the physical network.
Show answer and explanation
Correct answers: A, D
Explanation
The issue described is related to internal VM-to-VM communication within the same segment. Key troubleshooting steps involve verifying that Distributed Firewall rules are not blocking traffic and ensuring ARP resolution is functioning correctly. Misconfigurations in these areas are common causes of connectivity issues in NSX-T environments.
- A. Correct.
Distributed Firewall (DFW) rules can block east-west or north-south traffic for VMs. Misconfigured or overly restrictive firewall policies can cause connectivity issues.
- B. Incorrect.
While bandwidth constraints on Virtual Distributed Switch (VDS) uplinks might cause performance degradation, it is unlikely to cause complete connectivity failure within the same segment.
- C. Incorrect.
Edge nodes handle routing and north-south traffic, but they are not directly involved in intra-segment communication. Therefore, this is not relevant for the described issue.
- D. Correct.
The ARP table is critical for resolving MAC addresses to IP addresses. If ARP resolution fails, the VM cannot communicate with other VMs, even within the same segment.
- E. Incorrect.
Segments in an NSX-T environment are overlay networks and do not rely on VLANs for intra-segment communication. This is irrelevant for the described issue.