An administrator is configuring connectivity for an Azure environment containing the following resources:
* `VNet-Hub` () with a virtual network gateway and virtual machines deployed in its subnets.
* `VNet-SpokeA` () with virtual machines deployed in its subnets.
You configure virtual network peering between `VNet-Hub` and `VNet-SpokeA`. Virtual machines in `VNet-SpokeA` must be able to use the virtual network gateway in `VNet-Hub` to communicate with an on-premises network.
Which of the following configuration settings must be enabled on the peerings to achieve this goal? (Select two.)
- Enable 'Allow gateway transit' on the peering configuration from VNet-Hub to VNet-SpokeA.Answer
- Enable 'Use remote gateways' on the peering configuration from VNet-SpokeA to VNet-Hub.Answer
- CEnable 'Allow forwarded traffic' on the peering configuration from VNet-SpokeA to VNet-Hub.
- DEnable 'Allow gateway transit' on the peering configurations for both VNet-Hub and VNet-SpokeA.
Answer
Enable 'Allow gateway transit' on the peering configuration from VNet-Hub to VNet-SpokeA, and enable 'Use remote gateways' on the peering configuration from VNet-SpokeA to VNet-Hub.
To configure gateway transit across peered virtual networks, you must configure settings on both ends of the peering connection. The virtual network containing the gateway (VNet-Hub) must be configured to allow transit by enabling 'Allow gateway transit'. The virtual network that will use the gateway (VNet-SpokeA) must be configured to use the remote gateway by enabling 'Use remote gateways'.
Step-by-Step Solution
Key Concept
Virtual Network Peering Gateway Transit