101 · Question #76
Which three statements are true about SNATs? (Choose three.)
The correct answer is B. SNAT s support UDP, TCP, and ICMP traffic. C. SNAT addresses can be identical to virtual server IP addresses.. F5 SNATs support multiple IP protocols and allow translation addresses that overlap with virtual server IPs, but they are strictly unidirectional and do not permit external hosts to initiate inbound connections.
Question
Which three statements are true about SNATs? (Choose three.)
Options
- ASNAT s provide bidirectional traffic initiation.
- BSNAT s support UDP, TCP, and ICMP traffic.
- CSNAT addresses can be identical to virtual server IP addresses.
How the community answered
(26 responses)- A12% (3)
- B88% (23)
Why each option
F5 SNATs support multiple IP protocols and allow translation addresses that overlap with virtual server IPs, but they are strictly unidirectional and do not permit external hosts to initiate inbound connections.
SNATs are strictly unidirectional - they only translate the source address for internally initiated outbound connections and do not enable external hosts to initiate inbound connections, which is the role of a virtual server.
F5 BIG-IP SNATs natively support TCP, UDP, and ICMP traffic, allowing all three protocol types to use source address translation for outbound connections through the BIG-IP.
A SNAT translation address may share the same IP as a virtual server because BIG-IP distinguishes between them using connection directionality and listener context - inbound connections hit the virtual server while outbound connections match the SNAT.
Concept tested: F5 SNAT protocol support, address overlap, and traffic directionality
Source: https://techdocs.f5.com/en-us/bigip-17-1-0/big-ip-local-traffic-management-getting-started-guide/snats.html
Topics
Community Discussion
No community discussion yet for this question.