Your company has an Azure environment with two virtual networks in the East US region:
* VNet-Core (), which contains a subnet named GatewaySubnet () with an active Virtual Network Gateway connected to an on-premises network.
* VNet-App1 (), which contains a subnet named Subnet-App1 () with an active virtual machine named VM1.
You establish a virtual network peering connection between VNet-Core and VNet-App1. You need to allow VM1 in VNet-App1 to access resources in the on-premises network by routing traffic through the Virtual Network Gateway in VNet-Core.
Which two configurations should you enable to meet this requirement? (Select two.)
- On the peering link from VNet-Core to VNet-App1, select Allow gateway transit.Answer
- On the peering link from VNet-App1 to VNet-Core, select Use the remote virtual network's gateway.Answer
- COn the peering link from VNet-App1 to VNet-Core, select Allow gateway transit.
- DOn the peering link from VNet-Core to VNet-App1, select Use the remote virtual network's gateway.
Answer
Enable 'Allow gateway transit' on the peering link from VNet-Core to VNet-App1, and enable 'Use the remote virtual network's gateway' on the peering link from VNet-App1 to VNet-Core.
To route traffic from a spoke virtual network through a gateway in a hub virtual network, you must enable 'Allow gateway transit' on the peering link originating from the hub virtual network (VNet-Core to VNet-App1) and enable 'Use the remote virtual network's gateway' on the peering link originating from the spoke virtual network (VNet-App1 to VNet-Core).
Step-by-Step Solution
Key Concept
Virtual Network Gateway Transit in Peered Networks