nerdexam
F5

101 · Question #41

A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arr

The correct answer is B. Some virtual servers could be associated with SNAT pools and others not associated with SNAT. On F5 BIG-IP, SNAT processing can be scoped to individual virtual servers, allowing selective source address translation based on which virtual server receives the traffic.

Section 2: F5 Solutions and Technology

Question

A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arrive on. What could best accomplish this goal.

Options

  • AA SNAT for all addresses could be defined, and then disable the SNAT processing for select
  • BSome virtual servers could be associated with SNAT pools and others not associated with SNAT
  • CThe decision to perform source address translation is always based on VLAN. Thus, the goal
  • DThe decision to perform source address translation is always based on a client's address (or

How the community answered

(18 responses)
  • A
    11% (2)
  • B
    78% (14)
  • C
    6% (1)
  • D
    6% (1)

Why each option

On F5 BIG-IP, SNAT processing can be scoped to individual virtual servers, allowing selective source address translation based on which virtual server receives the traffic.

AA SNAT for all addresses could be defined, and then disable the SNAT processing for select

BIG-IP does not provide a mechanism to define a global SNAT and then selectively disable it for specific virtual servers on a per-virtual-server basis - SNAT scope is controlled by association, not by disabling.

BSome virtual servers could be associated with SNAT pools and others not associated with SNATCorrect

In BIG-IP, a SNAT pool or automap can be assigned directly to a virtual server's configuration, meaning only traffic arriving on that virtual server undergoes source address translation. Virtual servers that are not associated with any SNAT will pass traffic without translating the source address. This provides granular, per-virtual-server control over SNAT behavior.

CThe decision to perform source address translation is always based on VLAN. Thus, the goal

SNAT processing on BIG-IP is not restricted to VLAN-based decisions alone; it can be applied selectively per virtual server, iRule, or origin address list.

DThe decision to perform source address translation is always based on a client's address (or

While a SNAT can use an origin address list to limit which client source IPs are translated, the question specifically states the determination is based on virtual server, not client IP, making this option incorrect for the described scenario.

Concept tested: Per-virtual-server SNAT pool assignment on BIG-IP

Source: https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-local-traffic-management-getting-started-with-snats.html

Topics

#SNAT#virtual server#SNAT pool#source address translation

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 101 Practice