A hub network hosts a VPN gateway. A spoke network must send traffic to on-premises through that gateway over peering. Which settings are needed?
Show answer and explanation
Answer: C
Gateway transit is enabled on the hub side of the peering, which allows the hub gateway to be shared. The spoke side must then enable the setting that uses remote gateways so the routes learned through the hub gateway are installed. Both halves are required, and FastPath or a default route alone would not share the gateway.
Why the other options are wrong
- A. The roles are reversed. Allowing gateway transit belongs on the hub, and using remote gateways belongs on the spoke, so this assignment does not work.
- B. FastPath is an ExpressRoute data-path option and does not share a VPN gateway across peering. Gateway transit and remote gateway settings are still needed.
- D. A default route in a route table does not share a gateway. Gateway transit and remote gateway settings on the peerings are required.