VCP-VCF Administrator 2024 Question 336
Select 4A VMware Cloud Foundation administrator is troubleshooting a connectivity issue between two VMs running in different segments within an NSX-T overlay network. The administrator notices that the VMs cannot ping each other. Upon investigation, the administrator discovers the Tier-1 gateway is not forwarding traffic correctly. What should the administrator check to resolve this issue?
- A
Verify that the Segment VLANs are correctly configured on the physical switch.
- B
Check the state of the Tier-1 gateway to ensure it is not in a 'stopped' or 'down' state.
- C
Ensure that the Edge Cluster is properly configured and associated with the Tier-1 gateway.
- D
Validate that the Transport Zones used by the segments are aligned and properly mapped.
- E
Verify that Distributed Firewall rules are not blocking traffic between the segments.
Show answer and explanation
Correct answers: B, C, D, E
Explanation
When troubleshooting connectivity issues in an NSX-T overlay network, identifying the root cause requires systematically verifying key components. In this case, the Tier-1 gateway must be operational and correctly configured, the Edge Cluster must be associated with the gateway, and the Transport Zones must align properly. Additionally, Distributed Firewall rules can block traffic even if network configurations are correct. However, Segment VLANs are not applicable to NSX-T overlay networks since they use encapsulation for segment communication, making Option 1 incorrect.
- A. Incorrect.
Segment VLANs are not relevant to NSX-T overlay networks as these networks use encapsulation (e.g., GENEVE) instead of VLAN tagging for network segmentation.
- B. Correct.
If the Tier-1 gateway is in a 'stopped' or 'down' state, it will not process or forward traffic between overlay segments. Checking its state is critical.
- C. Correct.
The Edge Cluster is responsible for routing and connectivity in an NSX-T environment, particularly for Tier-1 gateways. A misconfigured or unassociated Edge Cluster can cause connectivity issues.
- D. Correct.
Transport Zones in NSX-T define the scope of networking and must be correctly mapped to the segments. Misaligned or mismapped Transport Zones can prevent communication between VMs.
- E. Correct.
Distributed Firewall rules in NSX-T can block traffic between segments if not properly configured. Validating these rules is essential when troubleshooting connectivity issues.