A network administrator needs to connect an on-premises location to a Google Cloud Virtual Private Cloud (VPC) using an HA Cloud VPN gateway with dynamic routing over the public internet. Which TWO configuration steps or requirements are necessary to implement this solution? (Select TWO answers)
- Deploy a Cloud Router in the target VPC region to exchange dynamic routes via Border Gateway Protocol (BGP).Answer
- Configure two IPsec VPN tunnels from the HA Cloud VPN gateway interfaces to the on-premises VPN device.Answer
- CEstablish VPC Network Peering directly between the on-premises gateway IP address and the Cloud Router to enable transitive route learning.
- DConfigure static routes in the VPC routing table pointing to the HA Cloud VPN gateway interface IP addresses instead of using dynamic routing.
- EDefine VPC Service Controls perimeters around the VPN interfaces to handle the IPsec encryption keys.
Answer
The correct requirements are configuring Cloud Router with BGP for dynamic routing and configuring two IPsec VPN tunnels from the HA Cloud VPN gateway interfaces.
Deploying an HA Cloud VPN requires configuring Cloud Router to manage dynamic BGP route exchanges and establishing two IPsec VPN tunnels using the dual interfaces on the HA gateway to guarantee topology redundancy and SLA compliance.
Step-by-Step Solution
Key Concept
HA Cloud VPN Topology and BGP Dynamic Routing