In the Huawei CloudFabric solution, when a tenant orchestrates VPC communication services, interconnection VRFs might be needed. Which of the following statements about interconnection VRFs is correct?
A Two different interconnection VRFs need to be created when the virtual firewalls of the two VPCs that communicate with each other are on the same physical firewall; traffic passes through firewalls at both ends, and the two VPCs share the same service leaf node. B Two different interconnection VRFs need to be created when the virtual firewalls of the two VPCs that communicate with each other are on two different physical firewalls connected to the same service leaf node, and traffic passes through firewalls at both ends. C In all VPC communication scenarios, if interconnection VRFs are used, the VPCs share one interconnection VRF. The controller does not create two different interconnection VRFs. D Two different interconnection VRFs need to be created when the virtual firewalls of the two VPCs that communicate with each other are on two different physical firewalls connected to different service leaf nodes, and traffic passes through firewalls at both ends. Show Answer Answer Explanation An interconnection VRF is created per attachment point on a service leaf node. Two distinct interconnection VRFs are only required when the virtual firewalls of the communicating VPCs reside on two different physical firewalls that are themselves connected to two different service leaf nodes, because each leaf node needs its own local VRF instance to anchor the route leaking toward its attached firewall; when the firewalls share a leaf node or a single physical device, one interconnection VRF suffices for both VPCs.
Community Discussion