Question

You are deploying an HA VPN gateway in a Google Cloud project to connect to your on-premises data center. You have configured the HA VPN gateway with two interfaces and created two tunnels to two separate on-premises VPN peer devices. You now need to establish dynamic routing between Google Cloud and on-premises. Which action correctly establishes the BGP sessions for this HA VPN configuration?

Accepted Answer

Create a single Cloud Router and configure one BGP session per tunnel, each with a unique BGP peer IP and link-local /30 (169.254.x.x) address on both the Cloud Router interface and the peer.

Answer

Create two separate Cloud Routers, one per tunnel, each with a single BGP session using publicly routable peer IP addresses.

Answer

Create a single Cloud Router with one BGP session that spans both tunnels, using ECMP to distribute BGP traffic across the tunnels automatically.

Answer

Create a single Cloud Router and configure static routes for the on-premises prefixes on each tunnel, since HA VPN does not support BGP.