200-901 · Question #661
Refer to the exhibit. A company recently acquired new IP-based security cameras. After discussion with the engineering team, they decide to segment the security camera traffic from the rest. The…
The correct answer is A. A NAT inside rule is missing from the GigabitEthernet0/0/0.10 interface. The configuration in the exhibit shows that VLAN 10 is assigned to GigabitEthernet0/0/0.10 with an IP address of 192.168.20.0/24. For NAT to function, the interface that is part of the internal network must be configured as a NAT inside interface. However, the configuration…
Question
Refer to the exhibit. A company recently acquired new IP-based security cameras. After discussion with the engineering team, they decide to segment the security camera traffic from the rest. The engineer assigns the new VLAN 10 for the security camera traffic. After all the devices are configured, it seems as if the cameras cannot access the Internet. After a few minutes of debugging, the engineer restricts the problem to the router configuration. What is the cause of the issue?
Exhibit
Options
- AA NAT inside rule is missing from the GigabitEthernet0/0/0.10 interface.
- BA specific permit statement for the 192.168.20.0/24 subnet is missing from the access list.
- CA NAT inside rule is missing from the GigabitEthernet0/0/0 interface.
- DA specific permit statement for the 192.168.10.0/24 subnet is missing from the access list.
How the community answered
(41 responses)- A71% (29)
- B5% (2)
- C7% (3)
- D17% (7)
Explanation
The configuration in the exhibit shows that VLAN 10 is assigned to GigabitEthernet0/0/0.10 with an IP address of 192.168.20.0/24. For NAT to function, the interface that is part of the internal network must be configured as a NAT inside interface. However, the configuration lacks the ip nat statement on GigabitEthernet0/0/0.10.
Topics
Community Discussion
No community discussion yet for this question.