Scenario: A Citrix ADC receives packets destined for a MAC address owned by the Citrix ADC. The destination IP address of the packets does NOT belong to the Citrix ADC. Layer 3 mode is enabled by…

Question

Options

• Adrop
• Bprocess
• Croute
• Dbridge

• A
  3% (1)
• B
  3% (1)
• C
  86% (31)
• D
  8% (3)

Explanation

When a Citrix ADC in Layer 3 mode receives a frame addressed to its own MAC, it accepts it at Layer 2 - but then inspects the IP layer. Since the destination IP doesn't belong to the ADC, it acts as a router and forwards the packet based on its routing table, which is exactly what Layer 3 mode enables.

Why the distractors are wrong:

• A (drop) - The ADC doesn't discard the packet; Layer 3 mode specifically enables IP forwarding for traffic not destined to the ADC itself.
• B (process) - Processing (passing the packet up to ADC services/features) only happens when the destination IP belongs to the ADC (e.g., a VIP).
• D (bridge) - Bridging is a Layer 2 behavior where the ADC forwards based on MAC addresses without examining the IP header; this requires Layer 2 mode, not the default Layer 3 mode.

Memory tip: Think of the modes as a ladder - Layer 2 = bridge (MAC only), Layer 3 = route (IP lookup). When you see "Layer 3 enabled + destination IP not mine," the ADC is wearing its router hat, not its appliance hat (process) or its switch hat (bridge).

No community discussion yet for this question.