A cloud network administrator is establishing high-availability hybrid connectivity between an on-premises data center and a GCP Virtual Private Cloud (VPC) network. An HA VPN gateway named `ha-vpn-gateway` and a Cloud Router named `bgp-router` have already been provisioned in region `us-central1`. Which TWO steps must the administrator perform next to complete the operational deployment of the VPN tunnels and dynamic routing sessions?
- Create two High Availability VPN tunnel resources referencing `ha-vpn-gateway` and associate them with `bgp-router`.Cevap
- Configure BGP peerings on `bgp-router` corresponding to each VPN tunnel interface to exchange dynamic routes with the on-premises router.Cevap
- CDeploy an External Passthrough Network Load Balancer to route incoming IPsec traffic across both VPN tunnel endpoints.
- DAdd custom VPC firewall rules with a priority value of 65535 to ensure VPN tunnel traffic takes higher precedence over default ingress rules.
Cevap
The administrator must create two HA VPN tunnel resources associated with the Cloud Router and configure BGP peerings on the Cloud Router for each tunnel interface.
Completing an HA VPN deployment requires configuring two VPN tunnels attached to the HA VPN gateway and assigning both to the regional Cloud Router. Subsequently, BGP interfaces and peers must be established on the Cloud Router to dynamically advertise and learn routes between the cloud VPC and on-premises networks.
Adım Adım Çözüm
Anahtar Kavram
Configuring HA VPN Tunnels and BGP Peerings on Cloud Router