200-301 · Question #377
Refer to the exhibit. Which configuration must be applied to the router that configures PAT to translate all addresses in VLAN 200 while allowing devices on VLAN 100 to use their own IP addresses?
The correct answer is A. Router1(config)#access-list 99 permit 192.168.100.32 0.0.0.31. To configure PAT (Port Address Translation) so that all addresses in VLAN 200 (subnet 192.168.100.32/27) are translated, while devices on VLAN 100 use their own IP addresses (i.e., are not translated), you need to: - Create an access list that matches only the IP addresses in VLA
Question
Exhibits
Options
- ARouter1(config)#access-list 99 permit 192.168.100.32 0.0.0.31
- BRouter1(config)#access-list 99 permit 192.168.100.0 0.0.0.255
- CRouter1(config)#access-list 99 permit 209.165.201.2 255.255.255.255
- DRouter1(config)#access-list 99 permit 209.165.201.2 0.0.0.0
How the community answered
(30 responses)- A73% (22)
- B3% (1)
- C17% (5)
- D7% (2)
Explanation
To configure PAT (Port Address Translation) so that all addresses in VLAN 200 (subnet 192.168.100.32/27) are translated, while devices on VLAN 100 use their own IP addresses (i.e., are not translated), you need to: - Create an access list that matches only the IP addresses in VLAN 200 (192.168.100.32/27). - Apply NAT overload (PAT) to those addresses via the interface connected to the Internet - Set the correct interfaces as NAT inside (gi2/0/1.200) and NAT outside (gi1/0/0). access-list 99 permit 192.168.100.32 0.0.0.31, which matches the correct subnet for VLAN 200 (192.168.100.32–192.168.100.63).
Topics
Community Discussion
No community discussion yet for this question.

