An administrator creates a new Azure virtual network named `VNet-Main` containing a subnet named `Subnet-Web` () and a subnet named `Subnet-Security` (). A custom firewall VM is installed in `Subnet-Security` at . By default, system routes allow direct subnet-to-subnet communication and direct outbound internet access. You need to ensure that all outbound internet traffic from `Subnet-Web` is redirected through the custom firewall VM instead of going directly to the internet. Which two actions are required to achieve this goal? (Select two.)
- Enable IP forwarding on the Azure network interface (NIC) of the custom firewall VM.Cevap
- Create a route table containing a route that specifies as the next hop address, and link this table to `Subnet-Web`.Cevap
- CCreate a route table containing a route that specifies as the next hop address, and link this table to `Subnet-Security`.
- DEnable IP forwarding on the Azure network interfaces (NICs) of all VMs in `Subnet-Web`.
Cevap
Enable IP forwarding on the Azure network interface (NIC) of the custom firewall VM, and create a route table containing a route that specifies as the next hop address, and link this table to `Subnet-Web`.
To route outbound traffic from the web subnet through a custom firewall, you must create a route table with a default route () pointing to the firewall's private IP address () and associate it with the web subnet. This user-defined route overrides the default system route to the Internet. Additionally, because the firewall VM is acting as a router/transit device, you must enable IP forwarding on its Azure network interface so Azure does not drop transit packets.
Adım Adım Çözüm
Anahtar Kavram
User-defined routing precedence and network virtual appliance transit configuration