Soru

Zorluk: OrtaConfigure Virtual Network Peering

Your company has an Azure environment with two virtual networks in the East US region: VNet-Hub (10.10.0.0/1610.10.0.0/16) and VNet-Spoke1 (10.20.0.0/1610.20.0.0/16). VNet-Hub contains a Virtual Network Gateway connected to an on-premises network. Virtual machines are deployed in both virtual networks. You need to configure virtual network peering between VNet-Hub and VNet-Spoke1 so that virtual machines in VNet-Spoke1 can access the on-premises network through the gateway in VNet-Hub. Which two configuration settings should you enable? (Select two.)

  1. Configure the peering link from VNet-Spoke1 to VNet-Hub to use remote gateways.Cevap
  2. Configure the peering link from VNet-Hub to VNet-Spoke1 to allow gateway transit.Cevap
  3. C
    Configure the peering link from VNet-Hub to VNet-Spoke1 to use remote gateways.
  4. D
    Configure the peering link from VNet-Spoke1 to VNet-Hub to allow gateway transit.

Cevap

To allow the spoke virtual network to access the on-premises network via the hub's gateway, you must enable 'Use remote gateways' on the peering link from VNet-Spoke1 to VNet-Hub, and enable 'Allow gateway transit' on the peering link from VNet-Hub to VNet-Spoke1.
To route traffic from a spoke virtual network through a gateway in a hub virtual network, two settings are required. First, the peering from the hub VNet (VNet-Hub) to the spoke VNet (VNet-Spoke1) must have 'Allow gateway transit' enabled, which permits the hub to share its gateway. Second, the peering from the spoke VNet (VNet-Spoke1) to the hub VNet (VNet-Hub) must have 'Use remote gateways' enabled, which directs the spoke to route traffic through the hub's gateway.

Adım Adım Çözüm

1
Identify which virtual network contains the Virtual Network Gateway.
VNet-Hub contains the Virtual Network Gateway connected to the on-premises network.
This determines which network will transit traffic and which network will use a remote gateway.
2
Configure the peering link initiated from the hub virtual network (VNet-Hub to VNet-Spoke1).
Enable the 'Allow gateway transit' setting.
This permits VNet-Hub to share its gateway with the peered spoke network.
3
Configure the peering link initiated from the spoke virtual network (VNet-Spoke1 to VNet-Hub).
Enable the 'Use remote gateways' setting.
This allows the virtual machines in the spoke network to route their traffic to the gateway in the hub network.

Anahtar Kavram

Enabling gateway transit and remote gateways in peered virtual networks allows spoke networks to utilize a shared gateway in a hub network.
Tahmini Süre:1m 30s
Bu soruyu puanla