H13-531: HCIE-Cloud Computing V3.0 (Write)Demo

By Huawei · Question Mode

QuestionQ81

HUAWEI CLOUD Stack Deployment and Installation

In a newly deployed HUAWEI CLOUD Stack, an engineer plans a network segment for the cloud administrator and configures that segment on the core switch. During actual use, the cloud administrator can access only VMs in the Public VRF and cannot access VMs in the DMZ VRF.

Which of the following is a cause?

  • A The route from the network segment planned for the cloud administrator to the DMZ VRF is not configured on the core switch.
  • B The gateway of the network segment is not configured on the core switch.
  • C The firewall does not allow the traffic from the DMZ zone to the Public zone.
  • D The firewall does not allow related packets to pass through.
Explanation

Communication with VMs in a different VRF requires the core switch to have a route from the cloud-administrator network segment to the destination VRF. If the route to the DMZ VRF is absent, Public VRF can remain reachable while DMZ VRF is unreachable. Huawei documentation describes core switches as interconnecting network areas and firewall zones as controlling access between security domains.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!