Topic 1 Question 235

AWS Certified Advanced Networking - Specialty

Topic 1 Question 235
A company has VPCs in the us-east-1 Region that are connected to each other through a transit gateway. A network engineer needs to establish an AWS Direct Connect connection between the company's on-premises data center and the transit gateway for the migration of a workload.

The Direct Connect connection is UP according to the ConnectionState metric in Amazon CloudWatch. However, the VIF is DOWN. The network engineer has verified the transit VIF and BGP configurations on the on-premises router and has found no issues. However, the network engineer is unable to ping the Amazon peer IP address.

Which combination of steps should the network engineer take to troubleshoot this issue?

3 つ選択
- Verify that the correct IP address and subnet mask are in use for the subinterface on the router.
- Ensure that VLAN trunking is disabled on the router.
- Verify that the router has a MAC address entry from the AWS endpoint in the Address Resolution Protocol (ARP) table.
- Verify that the optical signal that is received over the cross connect is optimal.
- Ensure that the correct VLAN tag is applied on the subinterface configuration on the router.
- Ensure that TCP port 179 is not being blocked at the on-premises router.
ユーザの投票
コメント(4)
- 正解だと思う選択肢: AEF
  Answers: AEF
  
  👍 2
  jfedotov2025/01/22
- 正解だと思う選択肢: ACE
  Ping fails so it is lower level than port 179. Connect is up so have light. We have subinterface twice and if there is a subinterface trunking must already be disabled. Could be wrong IP/mask (A), arp failure - maybe cabling to wrong por (C), or wrong vlan tag (E).
  
  👍 2
  secdaddy2025/01/31
- 正解だと思う選択肢: ACE
  A. Correct IP address and subnet mask: This is crucial for establishing the connection. If these are incorrect, the VIF won't be able to establish a connection with the AWS side.
  
  C. MAC address entry in ARP table: If the router doesn't have the MAC address of the AWS endpoint in its ARP table, it won't be able to communicate at the link layer. This could explain why the network engineer is unable to ping the Amazon peer IP address.
  
  E. Correct VLAN tag: The VLAN tag must match between the AWS configuration and the router's subinterface. If this is misconfigured, the traffic won't be properly tagged and routed.
  
  👍 2
  dspd2025/02/09
シャッフルモード

ユーザの投票

コメント(4)