Nutanix NCP-CI-Azure Exam Dumps

Requirement Analysis: The NC2 VMs need to access Azure and on-premises resources without traversing the internet, ensuring secure and direct connectivity.

Solution Options:

SSH Connection: Suitable for individual remote access, not for full VM connectivity to Azure and on-premises resources.

Interface Endpoint: Facilitates private connectivity to specific Azure services, but not comprehensive for all resources.

ExpressRoute: Provides private, dedicated connectivity between Azure and on-premises environments. This ensures that traffic does not traverse the public internet, meeting the security and performance requirements.

Site-to-Site VPN: Provides secure connectivity but can involve traversing the internet, which is against the requirements.

Conclusion: ExpressRoute is the optimal solution as it offers a private connection that does not involve internet traversal, ensuring secure and efficient access to both Azure and on-premises resources.

Azure ExpressRoute Documentation

Nutanix Clusters on Azure Networking Guide

Equal-Cost Multi-Path (ECMP) Routing: ECMP allows multiple gateways to be used simultaneously for load balancing traffic across multiple paths. In this scenario, ECMP is configured to point to the external subnets in the Nutanix Transit VPC.

Traffic Distribution: All four Flow Gateway instances will be used to distribute the outgoing traffic from the application server based on the ECMP default route configuration. This ensures efficient load balancing and utilization of all available gateway resources.

Bidirectional Traffic: Both sending and receiving traffic will utilize all four Flow Gateway instances, ensuring high availability and performance for network-intensive applications.

Nutanix NC2 Networking Guide

Azure Networking Documentation on ECMP

Purpose of an Organization in NC2: In the NC2 console, an organization serves to manage and segregate clusters based on specific requirements such as departmental needs, project goals, or security policies.

Cluster Management: This segregation allows administrators to apply unique configurations, permissions, and policies to different clusters within the same environment, providing flexibility and control over resource allocation and management.

Nutanix NC2 Console Documentation

Best Practices for Managing NC2 Clusters

ERP Configuration: ERP (External Route Prefix) settings determine how traffic is routed between subnets and VPCs.

Objective: The goal is to isolate Darren-Tier3 while ensuring proper routing for Tier1 and Tier2.

Transit VPC ERP: Setting it to 10.0.0.0/16 ensures that it covers the entire VPC range, allowing traffic within Tier1 and Tier2.

Servers ERP: Setting it to 10.0.4.0/24 ensures isolation for Darren-Tier3 by limiting traffic to that specific subnet and preventing external traffic from reaching it.

Conclusion: This configuration achieves the isolation of Darren-Tier3 while allowing proper routing for Tier1 and Tier2.

Nutanix Networking Documentation

Azure Virtual Network Documentation

In the NC2 on Azure cluster scenario, the existing workloads were using floating IPs for inbound traffic before the addition of new Flow Gateways (FGW3 and FGW4). The NAT traffic path established initially will continue to direct traffic through the originally assigned Flow Gateways (FGW1 and FGW2). The existing workloads will not automatically utilize the new Flow Gateways (FGW3 and FGW4) without a reconfiguration or reboot, which reassigns the NAT paths.

Reference

Nutanix Flow Networking and Configuration Guide