定义VPN设备:本地网络网关

The network contains a VPN appliance that uses an IP address of 131.107.200.1.

You need to create an Azure resource that defines the VPN appliance in Azure.

Which Azure resource should you create?

提供答案和解答

Hot Area:

AnswerDiscussion

Correct Answer:

A Local Network Gateway is an object in Azure that represents your on-premise VPN device. A Virtual Network Gateway is the VPN object at the Azure end of the

VPN. A ‘connection’ is what connects the Local Network Gateway and the Virtual Network Gateway to bring up the VPN.

The local network gateway typically refers to your on-premises location. You give the site a name by which Azure can refer to it, then specify the IP address of the on-premises VPN device to which you will create a connection. You also specify the IP address prefixes that will be routed through the VPN gateway to the VPN device. The address prefixes you specify are the prefixes located on your on-premises network. If your on-premises network changes or you need to change the public IP address for the VPN device, you can easily update the values later.

Reference:


这个题目比较绕,需要重点关注下。

答案:Local network gateway(本地网络网关)

解答:
在 Azure 的站点到站点(S2S)VPN 架构中,需要在 Azure 中“定义”本地的 VPN 设备。用于此目的的资源就是 Local network gateway。该资源记录本地 VPN 设备的公网 IP(此处为 131.107.200.1)以及本地网络的地址前缀。随后再创建 Azure 端的 Virtual network gateway,并通过 Connection 将二者关联,从而建立 S2S VPN。