Soru

Zorluk: KolayConfigure Virtual Network Peering

An administrator is configuring a hub-and-spoke network topology in Microsoft Azure. VNet-Hub has the address space 10.100.0.0/1610.100.0.0/16, contains an Azure VPN Gateway, and has virtual machines deployed. VNet-Spoke has the address space 10.200.0.0/1610.200.0.0/16, does not contain a gateway, and has virtual machines deployed. A virtual network peering is established between VNet-Hub and VNet-Spoke. The administrator wants virtual machines in VNet-Spoke to route their on-premises traffic through the VPN Gateway in VNet-Hub. Which setting must the administrator configure on the peering connection from VNet-Spoke to VNet-Hub to achieve this objective?

  1. Enable 'Use remote gateways'Cevap
  2. B
    Enable 'Allow gateway transit'
  3. C
    Enable 'Allow forwarded traffic'
  4. D
    Enable 'Allow virtual network access'

Cevap

Enable 'Use remote gateways'
To allow virtual machines in VNet-Spoke to route their on-premises traffic through the VPN Gateway in VNet-Hub, the peering connection from VNet-Spoke to VNet-Hub must be configured to use the remote virtual network's gateway. This is achieved by enabling 'Use remote gateways'.

Adım Adım Çözüm

1
Identify the VNet hosting the gateway and the spoke VNet requiring access.
VNet-Hub hosts the VPN Gateway, and VNet-Spoke needs to send on-premises traffic through it.
This establishes the roles of the two virtual networks in the hub-and-spoke relationship.
2
Determine the required setting on the hub side of the peering connection.
The peering link from VNet-Hub to VNet-Spoke must have 'Allow gateway transit' enabled.
This allows the hub VNet to share its VPN gateway with the peered spoke VNet.
3
Determine the required setting on the spoke side of the peering connection.
The peering link from VNet-Spoke to VNet-Hub must have 'Use remote gateways' enabled.
This instructs VMs in the spoke VNet to route traffic destined for on-premises networks through the hub's gateway.

Anahtar Kavram

Gateway Transit in Virtual Network Peering
Bu soruyu puanla