A plant has two equal internet providers and an AWS VPN on each. Both paths should be used, and a provider failure should withdraw only that path. Static defaults are the only routing today. What should replace them?
Select an answer to reveal the explanation.
Short Explanation
Two driveways with one note that says use the left one will never notice when the right one is the survivor. You run BGP on the VPN over each provider so a failure withdraws only that path. A loopback that lives on only the first provider is still a single path.
Full Explanation
Equal internet providers into AWS stay independent when each one has its own VPN connection and its own BGP session. A failure then drops only that session. Static defaults do not withdraw a dead provider cleanly and do not describe two equal paths. One static out the first provider, with the second shut, throws away the provider they wanted to use. OSPF is not the protocol an AWS transit gateway uses for these VPN connections. A single BGP session on a loopback reachable through only the first provider never moves to the second provider when the first fails. Exam caveat: each AWS VPN connection still has two tunnels. BGP per provider is an additional connection, not a substitute for those tunnels. Operational check: show ip bgp summary should list a neighbor per provider, and shutting one provider should leave the other neighbor up with the VPC prefix installed.