Examkin

Question

Difficulty: MediumInfrastructure Migration with AWS Application Migration Service (MGN)

A financial services company is using AWS Application Migration Service (MGN) to migrate its legacy transaction-processing servers from an on-premises data center to AWS. The network connection is established via an AWS Direct Connect connection terminating at a Transit Gateway, which is associated with a dedicated staging VPC. The solutions architect has installed the AWS Replication Agent on the on-premises servers, but the replication status in the AWS MGN console displays 'Stalled' for all source servers. A network analysis shows that the agents are unable to establish a connection to the replication servers in the staging area subnet. Which of the following actions will resolve the replication connection issue?

  1. A
    Associate a Route 53 Private Hosted Zone with the staging VPC and ensure the on-premises servers can resolve the replication server DNS names.
  2. Update the security group associated with the replication servers in the staging area subnet to allow inbound traffic on TCP port 1500 from the on-premises subnet range.Answer
  3. C
    Deploy a single NAT Gateway in the staging subnet to route all outbound replication traffic to public replication endpoints.
  4. D
    Bypass the Transit Gateway and configure a Direct Connect Gateway directly attached to the staging VPC to support transitive VPC-to-VPC routing for replication.

Answer

Update the security group associated with the replication servers in the staging area subnet to allow inbound traffic on TCP port 1500 from the on-premises subnet range.
AWS Application Migration Service (MGN) relies on TCP port 1500 to stream replicated blocks from the agent running on the source server to the replication servers in the staging area VPC. Ensuring that the staging area security group permits inbound TCP traffic on port 1500 from the source subnet range allows the replication process to establish connectivity and proceed.

Step-by-Step Solution

1
Identify the port required by AWS Application Migration Service (MGN) for data replication.
TCP port 1500 is identified as the dedicated port used by the Replication Agent to send replication data to the replication servers.
Data replication packets are sent directly from the source servers to the staging area replication servers over TCP port 1500.
2
Analyze the security group and firewall configurations in the staging VPC.
Confirm that the security group attached to the replication servers does not permit inbound TCP port 1500 traffic from the on-premises network range.
By default, security groups block all inbound traffic unless explicitly permitted. If port 1500 is not allowed, the agents will show a status of 'Stalled'.
3
Update the staging VPC security group to allow inbound TCP port 1500.
Traffic flow is permitted and the Replication Agent establishes connection to the replication servers, resuming the data synchronization.
Allowing the replication port resolves the network block at the staging subnet level.

Key Concept

Replication data transport in AWS Application Migration Service (MGN) requires TCP port 1500 to be open from the source environment to the replication servers in the staging area.
Rate this question

Topics

Infrastructure Migration with AWS Application Migration Service (MGN)

More questions from this topic