Question
You plan to configure BGP for a Site-to-Site VPN connection between a datacenter and Azure.
Which two Azure resources should you configure? Each correct answer presents a part of the solution.
NOTE: Each correct selection is worth one point.
- A. a virtual network gateway Correct
- B. Azure Application Gateway
- C. Azure Firewall
- D. a local network gateway Correct
- E. Azure Front Door
Explanation
BGP for a Site-to-Site VPN is configured on both sides of the connection in Azure. On the virtual network gateway you enable BGP and set the Azure ASN. On the local network gateway, which represents the on-premises VPN device, you set the on-premises BGP peer IP address and ASN. Application Gateway, Azure Firewall and Azure Front Door do not take part in Site-to-Site VPN routing.
