A company is setting up a hybrid network environment to connect three VPCs with their on-premises network using an AWS Transit Gateway. A SysOps Administrator has created the Transit Gateway and established an AWS Site-to-Site VPN connection with dynamic routing (BGP) to the Transit Gateway. The administrator needs to configure routing so that instances in the private subnets of all three VPCs can communicate with the on-premises network.
Which steps must the administrator take to configure the routing? (Select TWO.)
- Enable route propagation for the Site-to-Site VPN attachment in the Transit Gateway route table.Cevap
- In the VPC subnet route tables, add a route for the on-premises network range pointing to the Transit Gateway attachment as the target.Cevap
- CCreate an Internet Gateway in each VPC and add a route for the on-premises CIDR targeting the Internet Gateway.
- DDeploy a NAT Gateway in the public subnets and route the on-premises destination CIDR through the NAT Gateway.
- ECreate a Gateway VPC Endpoint in each VPC and associate it with the subnet route tables to route the hybrid traffic.
Cevap
Enable route propagation for the Site-to-Site VPN attachment in the Transit Gateway route table, and add a route in the VPC subnet route tables pointing to the Transit Gateway attachment.
To enable hybrid connectivity via an AWS Transit Gateway, two main routing tables must be configured: the VPC subnet route tables and the Transit Gateway route table. First, traffic from the VPC subnets must know how to reach the on-premises network. This is achieved by adding a route in the VPC subnet route tables targeting the Transit Gateway. Second, the Transit Gateway must know how to route packets to the on-premises network via the VPN. By enabling route propagation on the Site-to-Site VPN attachment, the Transit Gateway dynamically learns the on-premises BGP-advertised routes.
Adım Adım Çözüm
Anahtar Kavram
Routing configuration for AWS Transit Gateway and Site-to-Site VPN hybrid connections.
Tahmini Süre:2m 0s