AWS Certified Advanced Networking - Specialty Exam: Designing VPC and On-Premises Network Communication | Answer

Designing VPC and On-Premises Network Communication

Prev Question Next Question

Question

Your on-premises network has an IP address range of 10.55.0.0/16

You have been allocated an address range of 10.55.253.0/24 for the AWS Cloud.

You need to design the VPC and ensure communication between the VPC and your on-premises network.

You need to ensure a proper setup is configured at the customer end.

How would you accomplish this? Choose 2 answers from the options given below.

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Answer - B and C.

Since the Address range assigned for the cloud is 10.55.253.0/24, this should be the address range assigned to the VPC.Then use the customer gateway on your side to route traffic through the VPN tunnel.

Option A is incorrect since this is not the IP range assigned for the AWS Cloud.

Option D is incorrect since the virtual private gateway is assigned to the VPC and not on the on-premises network.

For more information on setting up a VPN connection, one can visit the below URL.

https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/SetUpVPNConnections.html

To ensure communication between the VPC and the on-premises network, a VPN connection needs to be established between them. The VPN connection allows for secure communication over the internet by encrypting traffic between the two networks.

To accomplish this, you can follow these steps:

  1. Set up a VPC with an appropriate IP address range. In this case, you have been allocated the IP address range of 10.55.253.0/24 for the AWS Cloud. Therefore, you should set up a VPC with the same IP address range.

  2. Establish a VPN connection using either your customer gateway or virtual private gateway. Both options are valid, but the specific choice may depend on your organization's requirements.

  • If you choose to use a customer gateway, you need to configure the gateway with the public IP address of your on-premises router. Additionally, ensure a route is present in your on-premises router to route traffic via the customer gateway.
  • If you choose to use a virtual private gateway, you need to create a virtual private gateway in the VPC and attach it to the VPC's Internet Gateway. Once created, establish a VPN connection to the virtual private gateway from your on-premises network. Similarly, ensure a route is present in your on-premises router to route traffic via the virtual private gateway.

By following the above steps, you can set up a VPC with the appropriate IP address range and establish a secure VPN connection between the VPC and your on-premises network, allowing for communication between them.

Prev Question Next Question