A company installed an AWS Site-to-Site VPN and configured it to use two tunnels. The company has learned that the VPN connectivity is unstable. During a ping test from the on-premises data center to AWS, a network engineer notices that the first few ICMP replies time out but that subsequent requests are successful. The AWS Management Console shows that the status for both tunnels last changed at the same time the ping responses were successfully received.
Which steps should the network engineer take to resolve the instability? (Choose two.)

Question

A company installed an AWS Site-to-Site VPN and configured it to use two tunnels. The company has learned that the VPN connectivity is unstable. During a ping test from the on-premises data center to AWS, a network engineer notices that the first few ICMP replies time out but that subsequent requests are successful. The AWS Management Console shows that the status for both tunnels last changed at the same time the ping responses were successfully received.

Which steps should the network engineer take to resolve the instability? (Choose two.)

Nikolay Yankov · Accepted Answer

Use AS PATH prepending on one path to cause all traffic to prefer that tunnel.

Nikolay Yankov · Accepted Answer

Use a higher multi-exit discriminator (MED) value on the preferred path to prefer that tunnel.

Nikolay Yankov · Answer

Enable dead peer detection (DPD) on the customer gateway device.

Nikolay Yankov · Answer

Change the tunnel configuration to active/standby on the virtual private gateway.

Nikolay Yankov · Answer

Send ICMP requests to an instance in the VPC every 5 seconds from the on-premises network.

Question list

List of questions

Question 1

(1)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 149 - ANS-C00 discussion

Suggested answer: C, E

0 comments