Aviatrix ACE Aviatrix Certified Engineer (ACE) program Exam Practice Test

NAT capability supported on the gateway - An Aviatrix OpenVPN® gateway performs a NAT function for

the user’s VPN traffic, effectively masking out the VPN client’s virtual IP address assigned by gateway from

the VPN CIDR Block. but here specifically AWS NAT Gateway is asked.

An Aviatrix OpenVPN is DUO multi-factor authentication supported.

LDAP/AD Integration Authenticates VPN user from Aviatrix gateways in addition to VPN certificate

authentication.

Customers need to sign a separate licensing agreement with Aviatrix to get started because

controller can be launched from any cloud provider’s Marketplace (Pay-As-You-Go meeting).

● Customer are also responsible for the Aviatrix license that is required to deploy the Aviatrix User VPN

solution.

● Customer need to subscribe to the Aviatrix AMI of the deployment steps, hence sustomer subscribes to an

Amazon Machine Image (AMI) for Aviatrix software in AWS Marketplace,● Customer needs to choose the Aviatrix Secure Networking Platform PAYG - Metered licensing option.

● This is an hourly-subscription license based on the prices listed in AWS Marketplace.

● With this pay-as-you-go license, you can build and scale your User VPN service to any size.

(AWS Direct Connect virtual interfaces)

You must create one of the following virtual interfaces to begin using your AWS Direct Connect

connection.

● Private virtual interface: A private virtual interface should be used to access an Amazon VPC using

private IP addresses.

● Public virtual interface: A public virtual interface can access all AWS public services using public IP

addresses.

● Transit virtual interface: A transit virtual interface should be used to access one or more Amazon VPC

Transit Gateways associated with Direct Connect gateways. You can use transit virtual interfaces with

1/2/5/10 Gbps AWS Direct Connect connections. For information about Direct Connect gateway

configurations, see Direct Connect gateways.

More Details:

Aviatrix Controller can allows customers to export Netflow data from all or select Aviatrix Gateways to

any Netflow collector on a custom port (your designated service point) by enablingusing NetFlow Agent .

Read Following Link for detailed Tutorial Steps. [Netflow

Integration](https://docs.aviatrix.com/HowTos/netflow.html)

Aviatrix Controller and gateways can forward Netflow logs to your designated service point.

Aviatrix Gateways generate and export information about network traffic. Flows come directly from

Gateways to CoPilot.

The flows are sent from the Aviatrix gateways directly to CoPilot’s instance.

https://docs.aviatrix.com/HowTos/copilot_faq.html

Link (Netflow Integration): https://docs.aviatrix.com/HowTos/netflow.html

Basically, there are 4 options for consumers to access Azure:

* Internet connectivity.

* Point-to-site VPN (P2S VPN)

* Site-to-Site VPN (S2S VPN)

* ExpressRoute.