A cloud engineer is designing a custom-mode Virtual Private Cloud (VPC) network in Google Cloud that will be connected to an on-premises data center using Cloud VPN. Which design requirement must be met when allocating primary IP address ranges for the subnets?
- The primary IP address ranges of the subnets must not overlap with the IP address ranges used in the on-premises network.Cevap
- BSubnets must use overlapping IP address ranges so that default VPC routing can perform automatic network address translation.
- CAuto-mode VPC creation must be enabled to automatically detect and reassign conflicting IP ranges dynamically.
- DFirewall rules must be configured with high priority to block conflicting IP traffic before it enters the VPN tunnel.
Cevap
The primary IP address ranges of the subnets must not overlap with the IP address ranges used in the on-premises network.
When connecting a Google Cloud VPC to an on-premises network via Cloud VPN or Cloud Interconnect, all subnet IP address ranges must be unique and non-overlapping. Overlapping CIDRs lead to routing conflicts where network packets cannot be properly forwarded.
Adım Adım Çözüm
Anahtar Kavram
VPC Subnet IP Address Allocation and Non-Overlapping CIDR Requirements