A SysOps administrator is configuring an AWS Site-to-Site VPN connection to establish hybrid connectivity between an on-premises network and a private subnet within an Amazon VPC. Which two steps must the administrator take to allow network traffic to flow between the private subnet and the on-premises network? (Select TWO.)
- Attach a Virtual Private Gateway to the VPC.Cevap
- Add a route in the subnet route table that points the on-premises CIDR block to the Virtual Private Gateway.Cevap
- CAttach an Internet Gateway to the VPC and add a route pointing the on-premises CIDR block to the Internet Gateway.
- DCreate a Gateway VPC Endpoint for the connection and associate it with the subnet route table.
- EConfigure a NAT Gateway in the private subnet and route the on-premises traffic through the NAT Gateway.
Cevap
To establish hybrid Site-to-Site VPN connectivity, the administrator must attach a Virtual Private Gateway to the VPC and add a route in the subnet route table pointing the on-premises destination CIDR block to the Virtual Private Gateway.
To establish hybrid network connectivity over an AWS Site-to-Site VPN, the AWS VPC must have a Virtual Private Gateway attached to act as the VPN concentrator. Furthermore, the route tables of any subnets that need to communicate with the on-premises network must have an explicit route pointing the on-premises CIDR block to the Virtual Private Gateway. These two actions enable both the termination of the VPN tunnel and the proper routing of outbound traffic from the private subnets.
Adım Adım Çözüm
Anahtar Kavram
Establishing AWS Site-to-Site VPN routing requires attaching a Virtual Private Gateway (or Transit Gateway) to the VPC and updating the VPC subnet route tables to direct traffic destined for the on-premises network to that gateway.
Tahmini Süre:1m 0s