2V0-41.24 Question 456
Single answerA network administrator is troubleshooting a connectivity issue in a VMware NSX-T Data Center environment. Multiple VMs connected to the same Tier-1 Logical Switch are unable to communicate with each other. The administrator confirms that the VMs are powered on, connected to the correct port groups, and have the correct IP addresses assigned. What should the administrator check next to resolve the issue?
- A
Verify that the Logical Switch has the correct Transport Zone assignment.
- B
Check if the Edge Node is configured correctly for Tier-1 Gateway routing.
- C
Ensure the Tier-1 Gateway firewall rules are not blocking east-west traffic.
- D
Confirm that the Distributed Firewall (DFW) rules are not blocking VM-to-VM traffic.
Show answer and explanation
Correct answer: D
Explanation
When troubleshooting VM communication issues on the same Logical Switch, it is critical to check Distributed Firewall (DFW) rules. DFW policies can block east-west traffic, even if VMs are correctly configured and connected to the same Logical Switch. Other options, such as Transport Zone assignment and Edge Node configuration, are not relevant since they pertain to uplink or north-south traffic routing rather than intra-switch communication.
- A. Incorrect.
Incorrect. The issue involves VMs connected to the same Logical Switch, so the Transport Zone assignment is not relevant in this case. Transport Zones are used for uplink communication and pathing, not intra-switch communication.
- B. Incorrect.
Incorrect. Edge Nodes are involved in north-south traffic routing, not east-west traffic within the same Logical Switch. This is not applicable here.
- C. Incorrect.
Incorrect. Tier-1 Gateway firewall rules govern traffic passing through the Tier-1 Gateway, which is not relevant for intra-switch VM communication.
- D. Correct.
Correct. Distributed Firewall (DFW) rules can block east-west traffic between VMs on the same Logical Switch. The administrator should verify the DFW rules to ensure there are no policies blocking VM-to-VM communication.