Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

VMware 3V0-25.25 Exam - Topic 3 Question 2 Discussion

A sovereign cloud provider has a VMware Cloud Foundation (VCF) stretched Workload Domain across two data centers (AZ1 and AZ2), where site connectivity via Layer 3 is provided by the underlay. The following NSX details are included in the design:* Each site must host its own local NSX Edge Cluster for availability zones.* Tier-0 gateways must be configured in active/active mode with BGP ECMP to local top-of-rack switches.* Inter-site Edge TEP traffic must not cross the inter-DC link.* SDDC Manager is used to automate NSX deployment.During deployment of the Edge Cluster for AZ2, the SDDC Manager workflow fails because the Edge transport nodes' TEP IPs are not reachable from the ESXi transport nodes. Which step ensures correct Edge Cluster deployment in multi-site stretched domains?
D) Create an AZ2-specific Edge TEP IP pool and map it to the AZ2 uplink profile before deploying the Edge Cluster.
A) Disable the liveness check during Edge deployment in SDDC Manager.
B) Configure BGP neighbors before deploying the Edge Cluster.
C) Reuse the TEP IP pool from AZ1.

VMware 3V0-25.25 Exam - Topic 3 Question 2 Discussion

Actual exam question for VMware's 3V0-25.25 exam
Question #: 2
Topic #: 3
[All 3V0-25.25 Questions]

A sovereign cloud provider has a VMware Cloud Foundation (VCF) stretched Workload Domain across two data centers (AZ1 and AZ2), where site connectivity via Layer 3 is provided by the underlay. The following NSX details are included in the design:

* Each site must host its own local NSX Edge Cluster for availability zones.

* Tier-0 gateways must be configured in active/active mode with BGP ECMP to local top-of-rack switches.

* Inter-site Edge TEP traffic must not cross the inter-DC link.

* SDDC Manager is used to automate NSX deployment.

During deployment of the Edge Cluster for AZ2, the SDDC Manager workflow fails because the Edge transport nodes' TEP IPs are not reachable from the ESXi transport nodes. Which step ensures correct Edge Cluster deployment in multi-site stretched domains?

Show Suggested Answer Hide Answer
Suggested Answer: D

Comprehensive and Detailed 250 to 350 words of Explanation From VMware Cloud Foundation (VCF) documents:

In a VMware Cloud Foundation (VCF) stretched cluster or Multi-Availability Zone (Multi-AZ) architecture, the networking design must account for the fact that AZ1 and AZ2 typically reside in different Layer 3 subnets. While the NSX Overlay provides Layer 2 adjacency for virtual machines across sites, the underlying Tunnel Endpoints (TEPs) must be able to communicate over the physical Layer 3 network.

According to the VCF Design Guide for Multi-AZ deployments, when stretching a workload domain, each availability zone should have its own dedicated TEP IP Pool. This is because TEP traffic is encapsulated (Geneve) and routed via the physical underlay. If the Edge nodes in AZ2 were to use the same IP pool as AZ1 (Option C), the physical routers would likely encounter routing conflicts or reachability issues, as the subnet for AZ1 would not be natively routable or 'local' to the AZ2 Top-of-Rack (ToR) switches.

The failure during the SDDC Manager workflow occurs because the automated 'Liveness Check' or 'Pre-validation' step attempts to verify that the newly assigned TEP IPs in AZ2 can reach the existing TEPs in the environment. To resolve this and ensure a successful deployment, the administrator must define a unique AZ2-specific IP Pool in NSX. Furthermore, this pool must be associated with an Uplink Profile (or a Sub-Transport Node Profile in VCF 5.x/9.0) that uses the specific VLAN tagged for TEP traffic in the second data center. This ensures that the Edge Nodes in AZ2 are assigned IPs that are valid and routable within the AZ2 underlay, allowing Geneve tunnels to establish correctly to the ESXi hosts in both sites without requiring a stretched Layer 2 physical network for the TEP infrastructure.

===========


Contribute your Thoughts:

0/2000 characters
Moon
26 days ago
A sounds risky, liveness checks are important!
upvoted 0 times
...
Candida
1 month ago
Surprised that TEP IPs aren't reachable! How does that even happen?
upvoted 0 times
...
Martina
1 month ago
I think B might be the right choice here.
upvoted 0 times
...
Derrick
1 month ago
D is definitely the way to go for proper isolation.
upvoted 0 times
...
Julio
2 months ago
I definitely remember that BGP configuration is important, but I don't think it should be done before deploying the Edge Cluster. It seems like the TEP pool is the main issue here.
upvoted 0 times
...
Derick
2 months ago
I'm a bit confused about the liveness check. I feel like disabling it might not be the best solution, but I can't recall why.
upvoted 0 times
...
Susana
2 months ago
I think we practiced a similar question where the TEP IPs were crucial for communication. Maybe creating a specific pool for AZ2 is the right move?
upvoted 0 times
...
Sharmaine
2 months ago
I remember something about needing separate TEP IP pools for each availability zone, but I'm not entirely sure if that's the key here.
upvoted 0 times
...
Donette
2 months ago
I vaguely recall something about liveness checks, but I don't think disabling them would help with the deployment issue we're facing here.
upvoted 0 times
...
Jamal
2 months ago
This question feels similar to one we practiced where we had to ensure connectivity between nodes. I think creating a specific Edge TEP IP pool for AZ2 makes sense.
upvoted 0 times
...
Robt
3 months ago
I'm not entirely sure, but I think configuring BGP neighbors might be important before deploying the Edge Cluster.
upvoted 0 times
...
Nieves
3 months ago
I remember something about TEP IPs needing to be unique for each site, so maybe we shouldn't reuse the pool from AZ1.
upvoted 0 times
...

Save Cancel