Branches reach the internet and have no MPLS. The cloud gateway was built with only a private transport color. BFD to the gateway stays down. What does the gateway need?
Select an answer to reveal the explanation.
Short Explanation
The branches are on the public road, and the gateway only has a private driveway. You give the gateway a public transport color those branches can reach. Another private color does not help sites that have no private underlay.
Full Explanation
BFD to a cloud gateway uses a transport color both sides share a path for. These branches have internet only. The gateway has only a private color, so there is no public address for them to reach and BFD stays down. Add a public transport on the gateway. A second private color is still private. Branches without MPLS cannot use it. VPN 512 does not turn a private color into a public one. It is the management VPN. A voice SLA does not create a public address. Exam caveat: the branch color still needs a route in VPN 0 to the gateway's new public address. Adding the color on the gateway without a branch route leaves BFD down. Operational check: the gateway TLOC should show a public color, and show sdwan bfd sessions on a branch should come up to it.