QuestionQ116

Design and implement an infrastructure to support SAP workloads on Azure

You have an on-premises datacenter.

You have an Azure subscription that includes a virtual network named VNet1.

You have an SAP RISE managed workload.

You need to make sure transitive connectivity exists between the datacenter, VNet1, and the managed workload.

Solution: Configure a Site-to-Site (S2S) VPN connection between the datacenter and the managed workload, and configure virtual network peering between VNet1 and the managed workload.

Does this satisfy the goal?

  • A Yes
  • B No
Explanation

Virtual network peering is not transitive. To allow VNet1 to reach an on-premises datacenter through an S2S VPN gateway in a peered network, the peering must be configured for gateway transit, including allowing gateway transit on the gateway network and using remote gateways on VNet1. A standard S2S VPN connection plus peering does not provide that connectivity by itself.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!