Which two of the following will be used for ingress traffic on the Edge node supporting a Single Tier topology? (Choose two.)

In a single-tier NSX topology, logical segments are connected directly to the Tier-0 gateway, which handles all North-South traffic. For ingress traffic (from the physical network to a virtual machine), the packet flow on the Edge node is as follows:
1. The packet enters the Edge node from the physical network and is received by the Tier-0 Service Router (SR) component on its Tier-0 Uplink interface.
2. The SR processes the packet (e.g., for stateful services) and forwards it to the Tier-0 Distributed Router (DR) component.
3. The DR performs a route lookup and sends the packet out through the appropriate Downlink Interface for the Tier-0 DR towards the destination logical segment. Both the Tier-0 Uplink and the Tier-0 Downlink are essential interfaces used in the ingress traffic path on the Edge node.

A. A Tier-1 Service Router (SR) is a component of a Tier-1 gateway, which by definition does not exist in a single-tier topology.
D. A Tier-1 Distributed Router (DR) is a component of a Tier-1 gateway, which is not present in a single-tier topology.
E. An Inter-Tier interface is used to connect a Tier-0 gateway to a Tier-1 gateway; this link is absent in a single-tier design.

1. VMware NSX-T Reference Design Guide 3.0

Page 33

Figure 18

"Single-Tier Routing Topology". This figure explicitly shows segments connected directly to the Tier-0 Gateway

establishing the architectural basis for a single-tier model where no Tier-1 gateway is present.

2. VMware NSX-T Reference Design Guide 3.0

Page 38

Figure 23

"North-South Traffic Flows with Active-Standby Tier-0". This diagram illustrates the ingress packet flow

showing the packet arriving at the "T0 Uplink" (Option B) and later being forwarded from the Tier-0 DR to the segment via a downlink port (Option C).

3. VMware NSX Data Center Administration Guide (v4.1)

Section: "Logical Routing". The documentation describes that a Tier-0 gateway provides North-South connectivity and can have segments connected directly to it. The traffic flow descriptions confirm that ingress traffic uses the uplink interface to enter the gateway and the downlink interface to exit towards a segment.