Question

You manage two virtual networks: Hub-VNet and Spoke-VNet. Hub-VNet contains a VPN gateway that provides connectivity to your on-premises datacenter. You create a VNet peering between the two VNets so that VMs in Spoke-VNet can reach on-premises resources through the Hub-VNet gateway. VMs in Spoke-VNet cannot reach on-premises. Which peering configuration must you apply to enable this?

Accepted Answer

On the Spoke-VNet peering, enable 'Use the remote virtual network's gateway or Route Server'; on the Hub-VNet peering, enable 'Allow gateway transit'.

Answer

On both peerings, enable 'Allow gateway transit'.

Answer

On the Spoke-VNet peering, enable 'Allow gateway transit'; on the Hub-VNet peering, enable 'Use the remote virtual network's gateway'.

Answer

Deploy a separate VPN gateway in Spoke-VNet and enable 'Allow forwarded traffic' on both peerings.