A device is being onboarded with two Internet interfaces.

In a scenario where a device is onboarded with two Internet interfaces and Direct Internet Access (DIA) is being configured, the following statements hold true:

Each underlay interface belongs to its own VR instance (Answer B): Typically, in Versa SD-WAN configurations, each underlay interface is assigned to its own virtual router (VR) instance. This approach allows for greater flexibility and isolation in managing routing and security policies specific to each interface. It supports independent operation and control, which is crucial for optimizing performance and security management.

Both Internet interfaces can be selected for DIA in workflows (Answer C): In Versa workflows, it is possible to configure both Internet interfaces for DIA. This configuration enhances redundancy and ensures that there is always an active path for Internet access, which is critical for maintaining high availability and network resilience.

The option A (All underlay interfaces belong to the same VR instance) is not typically true in complex deployments where separation of control and data planes is required for better management and security. Option D (Only one Internet interface can be selected for DIA in workflows) is incorrect because Versa SD-WAN allows multiple interfaces to be configured for DIA to leverage failover and load-balancing capabilities.

References:This explanation is based on the standard practices of deploying Versa SD-WAN solutions, where the architecture supports multiple virtual routers and the capability to configure multiple interfaces for DIA.