You are increasing your usage of Cloud VPN between on-premises and GCP, and you want to support more traffic than a single tunnel can handle. You want to increase the available bandwidth using Cloud VPN. What should you do?
A.
Double the MTU on your on-premises VPN gateway from 1460 bytes to 2920 bytes.
B.
Create two VPN tunnels on the same Cloud VPN gateway that point to the same destination VPN gateway IP address.
C.
Add a second on-premises VPN gateway with a different public IP address. Create a second tunnel on the existing Cloud VPN gateway that forwards the same IP range, but points at the new on-premises gateway IP.
D.
Add a second Cloud VPN gateway in a different region than the existing VPN gateway. Create a new tunnel on the second Cloud VPN gateway that forwards the same IP range, but points to the existing on-premises VPN gateway IP address.
The correct anwser is C
Option 1: Scale the on-premises VPN gateway
https://cloud.google.com/network-connectivity/docs/vpn/concepts/classic-topologies#option-1
Answer is 100% C!
There is practically no difference between C and D in terms of increasing the throughput. However, D does not work due to one info given in the statement. 'create a secondary VPN gateway in a DIFFERENT region'. The secondary VPN gateway should be in the same region as the first VPN gateway in order for this method to work.
NOT B because would not necessarily increase the available bandwidth as the tunnels would still be limited by the capacity of the single on-premises VPN gateway
B seems correct :
One peer VPN device with one IP address
This topology describes one HA VPN gateway that connects to one peer device that has one external IP address. The HA VPN gateway uses two tunnels, both tunnels to the single external IP address on the peer device.
https://cloud.google.com/network-connectivity/docs/vpn/concepts/topologies#1-peer-1-address
Choose C. Explanation:
Adding a second on-premises VPN gateway with a different public IP address can provide redundancy and potentially load balancing across the two on-premises gateways.
Creating a second tunnel on the existing Cloud VPN gateway that forwards the same IP range to the new on-premises gateway allows you to distribute traffic across both on-premises gateways.
If the goal is to increase bandwidth by load balancing traffic across two on-premises VPN gateways, this approach can be valid.
Option C is the only option that matches one of the Google Increased throughput and load balancing options (option 2), and it has to be in the same region
https://cloud.google.com/network-connectivity/docs/vpn/concepts/classic-topologies#option-1
Option B is the correct choice. By creating two VPN tunnels, you can distribute traffic between the tunnels, effectively increasing the available bandwidth. This configuration is known as a "redundant VPN gateway" configuration, where both tunnels are active at the same time and traffic can flow through either of them.
C is the correct option. Option D says to create another Cloud VPN GW to a DIFFERENT region, so it's not an option here.
Doc: https://cloud.google.com/network-connectivity/docs/vpn/concepts/classic-topologies#vpn-throughput
C: Set up a second on-premises VPN gateway device with a different external IP address. Create a second tunnel on your existing Cloud VPN gateway that forwards the same IP range, but pointing at the second on-premises gateway IP. Your Cloud VPN gateway automatically load balances between the configured tunnels. You can set up the VPN gateways to have multiple tunnels load balanced this way to increase the aggregate VPN connectivity throughput.
why not B?
you can have 1 cloudVPN gw in HA setup and you can configure each tunnel individually to the same remote public peer. Tested in the LAB and working fine
C. Add a second on-premises VPN gateway with a different public IP address. Create a second tunnel on the existing Cloud VPN gateway that forwards the same IP range, but points at the new on-premises gateway IP.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
HateMicrosoft
Highly Voted 4 years, 3 months agoseddy
Highly Voted 3 years, 6 months agonkastanas
Most Recent 4 months, 1 week agodev62
9 months agodesertlotus1211
8 months, 1 week agodesertlotus1211
8 months, 1 week agoxhilmi
11 months, 3 weeks agoBenMS
11 months, 3 weeks agoMo7y
1 year, 5 months agoHetavi
1 year, 6 months agomcjim
1 year, 6 months agoaparna20
1 year, 7 months agoaparna20
1 year, 7 months agoBen756
1 year, 8 months agoBen756
1 year, 6 months agojunior6
1 year, 8 months agojunior6
1 year, 8 months agoBlitzer
1 year, 9 months agosmarques
1 year, 10 months agopk349
1 year, 10 months agoconip
1 year, 10 months agoAzureDP900
2 years agoGCP72
2 years, 3 months ago