2V0-41.24 Question 458
Single answerAn administrator is troubleshooting a connectivity issue where virtual machines in one segment of an NSX-T logical switch cannot communicate with virtual machines in another segment. Upon investigation, the administrator notices that the T1 gateway is configured correctly, and both segments are attached to the T1 gateway. However, pings between virtual machines across segments fail. Which step should the administrator take next to resolve this issue?
- A
Verify that the T1 gateway is linked to a T0 gateway.
- B
Check if the Edge node where the T1 gateway is running has sufficient resources.
- C
Ensure that the firewall rules in the Distributed Firewall (DFW) allow traffic between the two segments.
- D
Validate that the VMs' MAC addresses are correctly learned in the segment tables on the NSX-T Manager.
Show answer and explanation
Correct answer: C
Explanation
For east-west traffic between segments within the same T1 gateway, the most common issue is related to Distributed Firewall (DFW) rules. If the firewall is blocking traffic between segments, communication will fail, even if the T1 gateway and segment configurations are correct. Checking and ensuring appropriate DFW rules is a necessary step to resolve such issues.
- A. Incorrect.
The T1 gateway being linked to a T0 gateway is only necessary for north-south traffic (external connectivity). This configuration does not impact east-west traffic between segments.
- B. Incorrect.
An Edge node's resource availability could affect north-south traffic if the T1 gateway is configured for it, but east-west traffic between segments does not rely on Edge resources.
- C. Correct.
Firewall rules in the Distributed Firewall (DFW) can block traffic between segments even if the T1 gateway and segments are configured correctly. Ensuring proper rules are in place is a critical troubleshooting step.
- D. Incorrect.
The MAC address learning on the segments is more relevant for troubleshooting broadcast or multicast communication issues, not inter-segment traffic.