
Explanation:
The question revolves around improving the bandwidth of a temporary AWS Site-to-Site VPN connection before the implementation of a Direct Connect connection. Option A is not feasible because AWS does not allow increasing the bandwidth quota for Site-to-Site VPN connections beyond their default limits. Option B suggests upgrading the customer gateway device, but this does not address the inherent bandwidth limitations of AWS Site-to-Site VPN connections, which are capped at 1.25 Gbps regardless of the customer gateway's capabilities. Option C proposes creating additional Site-to-Site VPN connections and using ECMP routing to aggregate their bandwidth. This is a viable solution because ECMP routing can distribute traffic across multiple VPN connections, effectively increasing the total available bandwidth. Option D suggests using a transit gateway with multiple VPN connections and ECMP routing. While this is also a valid approach, it introduces additional complexity and cost by involving a transit gateway, which may not be necessary for a temporary solution. Therefore, the most straightforward and cost-effective solution is Option C, which leverages existing AWS features to increase bandwidth without requiring significant changes to the network architecture.
Ultimate access to all questions.
What steps should the network engineer take to enhance the bandwidth of the Site-to-Site VPN connection, which is currently limited to 1.25 Gbps, prior to the deployment of the 10 Gbps AWS Direct Connect connection?
A
Contact AWS Support to request a bandwidth quota increase for the existing Site-to-Site VPN connection.
B
Discuss the issue with the hardware vendor. Buy a bigger and more powerful customer gateway device that has faster encryption and decryption capabilities.
C
Create several additional Site-to-Site VPN connections that terminate on the same virtual gateway. Configure equal-cost multi-path (ECMP) routing to use all the VPN connections simultaneously.
D
Create a transit gateway. Attach the VPCs to the transit gateway. Create several additional Site-to-Site VPN connections that terminate on the transit gateway. Configure equal-cost multi-path (ECMP) routing to use all the VPN connections simultaneously.
No comments yet.