Soru

Zorluk: KolayVPC Connectivity and Routing Troubleshooting

A SysOps administrator is troubleshooting connectivity between two VPCs: VPC A (10.0.0.0/1610.0.0.0/16) and VPC B (172.16.0.0/16172.16.0.0/16) that are connected via an active VPC peering connection. An EC2 instance in VPC A cannot establish a connection with an EC2 instance in VPC B. Which of the following routing table configurations are required to allow communication between the two VPCs? (Select TWO.)

  1. In the route table associated with the subnet in VPC A, add a route with a destination of 172.16.0.0/16172.16.0.0/16 and the VPC peering connection as the target.Cevap
  2. In the route table associated with the subnet in VPC B, add a route with a destination of 10.0.0.0/1610.0.0.0/16 and the VPC peering connection as the target.Cevap
  3. C
    In the route table associated with the subnet in VPC A, add a route with a destination of 0.0.0.0/00.0.0.0/0 and the Internet Gateway as the target.
  4. D
    In the route table associated with the subnet in VPC B, add a route with a destination of 10.0.0.0/1610.0.0.0/16 and a NAT Gateway as the target.
  5. E
    In the route table associated with the subnet in VPC A, add a route with a destination of 172.16.0.0/16172.16.0.0/16 and a Gateway VPC Endpoint as the target.

Cevap

To allow communication between the two peered VPCs, routes must be added to the subnet route tables in both VPC A and VPC B pointing to the CIDR block of the peered VPC with the VPC peering connection as the target.
For two VPCs to communicate over a peering connection, bidirectional routes must be explicitly defined. The route table in the source VPC must point to the destination VPC's CIDR block using the peering connection ID as the target, and the route table in the destination VPC must have a corresponding route pointing back to the source VPC's CIDR block.

Adım Adım Çözüm

1
Configure the route table in VPC A.
A route is added for destination 172.16.0.0/16172.16.0.0/16 targeting the VPC peering connection.
Allows traffic from VPC A to find the peering path to VPC B.
2
Configure the route table in VPC B.
A route is added for destination 10.0.0.0/1610.0.0.0/16 targeting the VPC peering connection.
Allows return traffic and new requests from VPC B to reach VPC A over the peering path.

Anahtar Kavram

VPC peering requires bidirectional routing updates in the subnet route tables of both VPCs involved in the peering relationship.
Bu soruyu puanla