You have three virtual networks in the East US region: VNet1 (), VNet2 (), and VNet3 (). Virtual machines are deployed in the subnets of all three virtual networks. You configure a virtual network peering between VNet1 and VNet2, and another virtual network peering between VNet2 and VNet3. No virtual network gateways or network virtual appliances (NVAs) are deployed in any of the virtual networks.
Which of the following statements about the connectivity and configuration options in this setup are correct? (Select two.)
- Virtual machines in VNet1 cannot communicate with virtual machines in VNet3 because virtual network peering is non-transitive.Answer
- To allow virtual machines in VNet1 to initiate communication with virtual machines in VNet2, 'Allow virtual network access' must be enabled on the peering link.Answer
- CVirtual machines in VNet1 can route traffic to VNet3 through VNet2 if 'Allow forwarded traffic' is enabled on the peering from VNet2 to VNet3.
- DYou can configure 'Allow gateway transit' on VNet2 and 'Use remote gateways' on VNet1 and VNet3 to route traffic between VNet1 and VNet3 without deploying a Virtual Network Gateway.
Answer
Virtual network peering is non-transitive, preventing communication between VNet1 and VNet3, and enabling communication between VNet1 and VNet2 requires setting 'Allow virtual network access' to enabled on the peering link.
Virtual network peering is non-transitive, meaning that traffic cannot flow from VNet1 through VNet2 to VNet3 without a router or gateway in place. Therefore, virtual machines in VNet1 cannot communicate with virtual machines in VNet3. Additionally, for virtual machines in peered networks like VNet1 and VNet2 to communicate, the 'Allow virtual network access' option must be enabled on the peering link.
Step-by-Step Solution
Key Concept
Azure Virtual Network Peering is non-transitive by default, and enabling communication between peered virtual networks requires the 'Allow virtual network access' setting.
Estimated Time:1m 0s