You have an Azure virtual network named `VNet1` that contains two subnets: `Subnet1` () and `Subnet2` (). You deploy a virtual machine in `Subnet2` that acts as a Network Virtual Appliance (NVA) with the private IP address of . You need to route all outbound traffic from `Subnet1` destined for the internet through the NVA. Which two actions should you perform? (Select two.)
- Create a route table, add a route for destination with the next hop type set to Virtual appliance pointing to , and associate the route table with Subnet1.Answer
- Enable IP forwarding on the network interface (NIC) attached to the virtual machine acting as the Network Virtual Appliance.Answer
- CAssociate the custom route table with Subnet2 to ensure the Network Virtual Appliance can route the traffic.
- DCreate a route table, add a route for destination with the next hop type set to Virtual Network Gateway pointing to , and associate the route table with Subnet1.
Answer
To successfully route outbound traffic from Subnet1 through the Network Virtual Appliance, you must create a route table with a default route () using the next hop type 'Virtual appliance' pointing to the appliance's IP address, associate this route table with Subnet1, and enable IP forwarding on the appliance's network interface.
Routing outbound traffic through a Network Virtual Appliance requires redirecting source traffic via a custom route table associated with the source subnet, referencing the appliance IP as a Virtual appliance next hop. In addition, the virtual machine hosting the appliance must have IP forwarding enabled at its Azure network interface level, otherwise the platform will discard the forwarded packets.
Step-by-Step Solution
Key Concept
Routing traffic through a Network Virtual Appliance (NVA) requires creating a User-Defined Route (UDR) with the 'Virtual appliance' next hop type associated with the source subnet, along with enabling IP forwarding on the NVA's network interface in Azure.