2V0-41.24 Question 97
Select 3A company is deploying a multi-tenant NSX environment to support their private cloud. The architecture requires optimal traffic flow between VMs within the same tenant and also efficient connectivity to external networks. Which combination of NSX features and architectures should the administrator implement to achieve this?
- A
Deploy a two-tier routing architecture with a Tier-0 gateway for north-south traffic and a Tier-1 gateway for tenant-specific east-west traffic.
- B
Utilize Tier-0 gateway exclusively to handle both east-west and north-south routing for simplicity.
- C
Configure distributed routing at the Tier-1 level to optimize east-west traffic between VMs within the same tenant.
- D
Enable centralized services on the Tier-0 gateway to process all routing traffic, including east-west routing.
- E
Use a logical router to separate tenant traffic and ensure isolation while enabling scalability.
Show answer and explanation
Correct answers: A, C, E
Explanation
The correct approach for the given scenario involves deploying a two-tier routing architecture (Tier-0 for north-south traffic and Tier-1 for east-west traffic), enabling distributed routing at the Tier-1 level for optimal tenant-specific east-west traffic, and using logical routers to ensure traffic isolation and scalability. This setup aligns with NSX's best practices for multi-tenant environments while providing efficient traffic flows and robust isolation.
- A. Correct.
A two-tier routing architecture with Tier-0 and Tier-1 gateways ensures efficient traffic management. Tier-0 handles north-south traffic, while Tier-1 is dedicated to tenant-specific east-west traffic. This approach optimizes traffic flow and isolates tenant networks.
- B. Incorrect.
Using only a Tier-0 gateway for both routing types compromises traffic efficiency and scalability, as Tier-0 is not designed to handle tenant-specific east-west traffic optimally.
- C. Correct.
Distributed routing at the Tier-1 level is critical for optimizing east-west traffic within the same tenant, as it allows VM-to-VM communication to bypass the central gateway.
- D. Incorrect.
Centralized services on the Tier-0 gateway are intended for north-south traffic and specific use cases, but are not suitable for handling tenant-specific east-west routing, as this would create bottlenecks.
- E. Correct.
Logical routers are essential for tenant isolation and scalability. They segregate tenant traffic while facilitating routing across the environment.