ANS-C01 practice question 11 of 35

A company's network engineer is designing an active-passive connection to AWS from two on- premises data centers. The company has set up AWS Direct…

Full set: 291 questions
A company's network engineer is designing an active-passive connection to AWS from two on- premises data centers. The company has set up AWS Direct Connect connections between the on- premises data centers and AWS. From each location, the company is using a transit VIF that connects to a Direct Connect gateway that is associated with a transit gateway. The network engineer must ensure that traffic from AWS to the data centers is routed first to the primary data center. The traffic should be routed to the failover data center only in the case of an outage. Which solution will meet these requirements?
Answer options
A: Set the BGP community tag for all prefixes from the primary data center to 7224:7100. Set the BGP community tag for all prefixes from the failover data center to 7224:7300
B: Set the BGP community tag for all prefixes from the primary data center to 7224:7300. Set the BGP community tag for all prefixes from the failover data center to 7224:7100 Correct answer
C: Set the BGP community tag for all prefixes from the primary data center to 7224:9300. Set the BGP community tag for all prefixes from the failover data center to 7224:9100
D: Set the BGP community tag for all prefixes from the primary data center to 7224:9100. Set the BGP community tag for all prefixes from the failover data center to 7224:9300
Correct Answer:
B. Set the BGP community tag for all prefixes from the primary data center to 7224:7300. Set the BGP community tag for all prefixes from the failover data center to 7224:7100
Explanation

To control outbound traffic from AWS over AWS Direct Connect and establish an active-passive configuration, BGP community tags are used. The 7224:7300 tag signals a high preference, while 7224:7100 signals a low preference. By advertising prefixes from the primary data center with the high preference tag (7224:7300) and prefixes from the failover data center with the low preference tag (7224:7100), the network engineer instructs the Direct Connect gateway to prioritize the path to the primary data center. Traffic will only be sent to the failover data center if the primary path becomes unavailable.

Why Incorrect

A. This configuration incorrectly sets the primary data center to low preference and the failover to high preference, making the failover path the active one.
C. The 9xxx series BGP community tags are used for local preference on private VIFs, not for influencing routing preference from a Direct Connect gateway with transit VIFs.
D. This option also uses the incorrect 9xxx series BGP community tags for a Direct Connect gateway scenario.

References

1. AWS Documentation, AWS Direct Connect User Guide, "Routing policies and BGP communities". This page explicitly lists the supported BGP communities for influencing routing.

2. AWS Documentation, AWS Direct Connect User Guide, "BGP communities for routing policies". It specifies: "For prefixes from an AWS Region, you can apply the following BGP communities: 7224:7100 – Low preference, 7224:7200 – Medium preference, 7224:7300 – High preference."

3. AWS Documentation, AWS Direct Connect User Guide, "Use BGP communities to influence the routes advertised and received over a public VIF". While this example is for a public VIF, the community tags for preference (7100, 7200, 7300) are applicable to Direct Connect gateway routing as well, as confirmed in the primary reference.

Scroll to Top