Question

Difficulty: MediumResilience, High Availability, and Redundancy

A network security administrator is enhancing default gateway availability for a critical transaction processing subnet. The design mandates that if the active border router suffers a hardware crash, internal client endpoints must maintain outbound connectivity automatically without requiring manual IP reconfiguration or workstation restarts. Which of the following controls best achieves this fault-tolerant requirement?

  1. Implement a First Hop Redundancy Protocol to share a virtual IP and MAC address across the routers.Answer
  2. B
    Configure Multipath I/O across the router network interfaces to balance incoming host sessions.
  3. C
    Schedule automated hourly configuration backups of the active router to a remote repository.
  4. D
    Enable port security with dynamic MAC filtering on the access switches connected to the default gateways.

Answer

Implementing a First Hop Redundancy Protocol (FHRP) allows redundant routers to share a single virtual IP and MAC address, allowing transparent gateway failover for client endpoints.
First Hop Redundancy Protocols allow two or more physical routers to present a shared virtual IP address and virtual MAC address to local endpoints. If the active master router fails, a backup router assumes responsibility for traffic sent to the virtual IP without requiring changes to client network settings.

Step-by-Step Solution

1
Analyze the technical requirement.
The requirement calls for automatic layer 3 default gateway failover for endpoint clients without manual endpoint reconfiguration.
Host computers configured with a static default gateway IP address cannot dynamically switch to a second router IP address unless a virtual gateway abstraction is used.
2
Evaluate candidate high availability protocols.
First Hop Redundancy Protocols (such as VRRP or HSRP) group physical routers into a logical unit assigned a virtual IP address used by endpoints as their default gateway.
When the primary router fails, a standby router immediately assumes the virtual IP address and virtual MAC address, continuing traffic forwarding seamlessly.

Key Concept

First Hop Redundancy Protocols (FHRP)
Rate this question