Question

Your company runs a Classic VPN gateway connecting its on-premises data center to a Google Cloud VPC. The Classic VPN uses static routes and a single tunnel. Leadership now requires a 99.99% availability SLA for this hybrid connection. Which approach correctly migrates the connectivity to meet the SLA requirement?

Accepted Answer

Deploy an HA VPN gateway with two interfaces, configure two tunnels to two separate on-premises peer devices (or a single device with two interfaces), and establish BGP sessions through a Cloud Router.

Answer

Add a second static-route tunnel to the existing Classic VPN gateway and enable ECMP so both tunnels carry traffic simultaneously.

Answer

Upgrade the Classic VPN gateway to enable dynamic routing with a Cloud Router while keeping the single tunnel, since BGP alone provides the 99.99% SLA.

Answer

Deploy an HA VPN gateway with a single tunnel to one on-premises peer device and configure a Cloud Router with BGP for automatic failover.