101 · Question #80
Which three parameters could be used to determine whether a connection request will have the source address translated as the request is processed? (Choose three.)
The correct answer is B. the client's browser's preferred language D. the client's TCP port E. the client's IP address. On F5 BIG-IP, source address translation decisions are primarily driven by the client's IP address and TCP port; these network-layer parameters are evaluated against SNAT object configurations and iRule conditions to determine if SNAT applies.
Question
Which three parameters could be used to determine whether a connection request will have the source address translated as the request is processed? (Choose three.)
Options
- Athe client's router's IP address
- Bthe client's browser's preferred language
- Cthe client's IP netmask
- Dthe client's TCP port
- Ethe client's IP address
- Fthe client IP fragment offset
How the community answered
(19 responses)- A5% (1)
- B74% (14)
- C5% (1)
- F16% (3)
Why each option
On F5 BIG-IP, source address translation decisions are primarily driven by the client's IP address and TCP port; these network-layer parameters are evaluated against SNAT object configurations and iRule conditions to determine if SNAT applies.
The client's router IP address (default gateway) is a local host routing concept not present in the IP packet header received by the BIG-IP, so it cannot be used in SNAT determination.
Via HTTP iRules assigned to a virtual server, application-layer attributes such as the Accept-Language header (browser preferred language) can be inspected to conditionally apply or bypass SNAT, making it a technically valid parameter for controlling source address translation.
The client's IP netmask is a local host configuration that is never transmitted in IP packets; the BIG-IP applies its own configured subnet masks to evaluate whether a client IP falls within a SNAT source range.
The client's TCP source port is a network-layer parameter directly accessible during connection processing; SNAT configurations and iRules can evaluate source port values to selectively apply source address translation.
The client's IP address is the primary matching criterion for SNAT objects; the BIG-IP compares the client source IP against the configured source address ranges in SNAT definitions to determine if translation is triggered.
The IP fragment offset field is a packet fragmentation control parameter unrelated to source address translation policy and is not evaluated in SNAT matching logic.
Concept tested: F5 BIG-IP SNAT matching parameters and iRule-based SNAT control
Source: https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-local-traffic-management-getting-started-with-nat/big-ip-local-traffic-management-getting-started-with-nat.html
Topics
Community Discussion
No community discussion yet for this question.