Question

Your team is deploying model-driven telemetry (MDT) from a fleet of IOS-XE routers to a centralized Telegraf collector using gRPC. The routers sit behind a NAT boundary, and the security team will only permit the routers to initiate outbound connections to the collector's IP and port; no inbound connections toward the routers are allowed. Which telemetry subscription architecture must you configure on the routers to satisfy this constraint?

Accepted Answer

A dial-out (configured) subscription where each router establishes the gRPC session to the collector's receiver address

Answer

A dial-in (dynamic) subscription where the collector opens a gRPC session to each router and requests the data

Answer

A NETCONF-based on-change subscription negotiated over the collector-initiated SSH channel

Answer

A dial-in subscription using gNMI Subscribe with the collector acting as the gRPC client to each router