An administrator is establishing a hybrid network connection in Azure. The infrastructure consists of two virtual networks in the North Europe region:
* `VNet-Hub` () has a virtual network gateway named `GW-Hub` and virtual machines running in `Subnet-Hub`.
* `VNet-Spoke` () has virtual machines running in `Subnet-Spoke` but does not contain a virtual network gateway.
The administrator configures virtual network peering between `VNet-Hub` and `VNet-Spoke`.
To enable the virtual machines in `VNet-Spoke` to access the on-premises resources by routing through `GW-Hub`, which two Peering configurations must be set? (Select two.)
- Configure 'Allow gateway transit' on the peering link from VNet-Hub to VNet-Spoke.Answer
- Configure 'Use remote gateways' on the peering link from VNet-Spoke to VNet-Hub.Answer
- CConfigure 'Allow gateway transit' on the peering link from VNet-Spoke to VNet-Hub.
- DConfigure 'Use remote gateways' on the peering link from VNet-Hub to VNet-Spoke.
- EConfigure 'Allow forwarded traffic' on the peering link from VNet-Hub to VNet-Spoke.
Answer
To allow virtual machines in VNet-Spoke to route through the virtual network gateway in VNet-Hub, you must configure 'Allow gateway transit' on the peering link from VNet-Hub to VNet-Spoke, and configure 'Use remote gateways' on the peering link from VNet-Spoke to VNet-Hub.
The correct configurations allow VNet-Spoke to leverage the gateway in VNet-Hub. To establish gateway transit, the peering link from VNet-Hub to VNet-Spoke must have 'Allow gateway transit' enabled, which permits VNet-Hub to share its gateway. Simultaneously, the peering link from VNet-Spoke to VNet-Hub must have 'Use remote gateways' enabled, allowing VNet-Spoke to route its traffic through the remote gateway.
Step-by-Step Solution
Key Concept
Gateway transit in virtual network peering allows peered virtual networks to share a gateway and obtain connectivity to on-premises resources.