You have an Azure virtual network named `VNet1` that contains three subnets named `SubnetA` (), `SubnetB` (), and `DMZSubnet` (). A Network Virtual Appliance (NVA) named `NVA1` is deployed in `DMZSubnet` and has the IP address .
You need to ensure that all traffic from `SubnetA` to the internet is routed through `NVA1`.
Which two actions should you perform? (Select two.)
- Create a route table, add a route for with a next hop type of Virtual appliance and a next hop IP address of , and associate the route table with SubnetA.Answer
- Enable IP forwarding on the network interface of NVA1.Answer
- CCreate a route table, add a route for with a next hop type of Virtual network gateway and a next hop IP address of , and associate the route table with SubnetA.
- DEnable IP forwarding on the network interfaces of all virtual machines in SubnetA.
Answer
To successfully route SubnetA's internet traffic through NVA1, you must create a route table containing a route for with a next hop type of Virtual appliance and a next hop IP address of , associate this route table with SubnetA, and enable IP forwarding on the network interface of NVA1.
To route internet traffic from SubnetA through NVA1, you need to create a UDR table with a route targeting the internet () using the Virtual appliance next hop type pointing to the private IP of NVA1 (), and associate this route table with SubnetA. In addition, you must enable IP forwarding on the network interface of NVA1 to permit it to receive and forward transit packets destined for other networks.
Step-by-Step Solution
Key Concept
Redirecting subnet traffic to a Network Virtual Appliance (NVA) requires configuring a UDR table with a next hop type of Virtual appliance pointing to the NVA's private IP, along with enabling IP forwarding on the NVA's network interface.