nerdexam
F5

101 · Question #448

When using SNAT, which additional IP addresses will the BIG-IP system change? (Choose two.)

The correct answer is B. The source IP address on the BIG-IP to pool member request packet. E. The destination IP address on the BIG-IP to client response packet.. SNAT causes BIG-IP to change the source IP on the outbound request to the pool member and the destination IP on the inbound response back to the client.

Section 3: Load Balancing and High Availability Basics

Question

When using SNAT, which additional IP addresses will the BIG-IP system change? (Choose two.)

Options

  • AThe source IP address on the client to BIG-IP request packet.
  • BThe source IP address on the BIG-IP to pool member request packet.
  • CThe destination IP address on the BIG-IP to pool member request packet.
  • DThe source IP address on the BIG-IP to client response packet.
  • EThe destination IP address on the BIG-IP to client response packet.
  • FThe destination IP address on the pool member to BIG-IP response packet.

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    84% (32)
  • C
    8% (3)
  • D
    3% (1)
  • F
    3% (1)

Why each option

SNAT causes BIG-IP to change the source IP on the outbound request to the pool member and the destination IP on the inbound response back to the client.

AThe source IP address on the client to BIG-IP request packet.

The source IP on the client-to-BIG-IP packet is the client own address and is not altered by SNAT - BIG-IP receives the original client IP on its virtual server listener.

BThe source IP address on the BIG-IP to pool member request packet.Correct

When SNAT is active, BIG-IP replaces the client source IP with the SNAT IP on the packet it forwards to the pool member, ensuring the pool member response returns to BIG-IP rather than directly to the client.

CThe destination IP address on the BIG-IP to pool member request packet.

The destination IP change from the virtual IP to the pool member address is performed by virtual server selection, not by SNAT, so it is not an additional change introduced by SNAT.

DThe source IP address on the BIG-IP to client response packet.

The source IP on the response sent back to the client is changed from pool member IP to the virtual server IP as part of standard virtual server address translation, not SNAT.

EThe destination IP address on the BIG-IP to client response packet.Correct

On the return path, BIG-IP must undo the SNAT translation by replacing the SNAT IP destination with the original client IP before forwarding the response, completing the address symmetry required for the client to receive a coherent reply.

FThe destination IP address on the pool member to BIG-IP response packet.

The pool member sends its response to the SNAT IP, which BIG-IP already owns, so no destination change is required on the pool-member-to-BIG-IP response packet.

Concept tested: SNAT address translation behavior on BIG-IP

Source: https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-local-traffic-management-getting-started-guide/using-snat-in-load-balancing-configurations.html

Topics

#SNAT#source NAT#IP address translation#request-response flow

Community Discussion

No community discussion yet for this question.

Full 101 Practice