nerdexam
F5

201 · Question #206

A BIG-IP Administrator finds the following log entry after a report of user issues connecting to a virtual server: 01010201: 2: Inet port exhaustion on 10.70.110.112 to 192.28.123.250:80 (proto 6) How

The correct answer is C. Add an address to the SNAT pool.. The log entry indicates 'Inet port exhaustion' for SNAT connections, meaning the BIG-IP is running out of available source ports for outbound connections to backend servers.

Section 5: Troubleshoot a BIG-IP System

Question

A BIG-IP Administrator finds the following log entry after a report of user issues connecting to a virtual server:

01010201: 2: Inet port exhaustion on 10.70.110.112 to 192.28.123.250:80 (proto 6) How should the BIG-IP Administrator modify the SNAT pool that is associated with the virtual server?

Options

  • ARemove the SNAT pool and apply SNAT Automap.
  • BRemove an IP address from the SNAT pool.
  • CAdd an address to the SNAT pool.
  • DIncrease the timeout of the SNAT addresses.

How the community answered

(30 responses)
  • A
    10% (3)
  • B
    3% (1)
  • C
    83% (25)
  • D
    3% (1)

Why each option

The log entry indicates 'Inet port exhaustion' for SNAT connections, meaning the BIG-IP is running out of available source ports for outbound connections to backend servers.

ARemove the SNAT pool and apply SNAT Automap.

Removing the SNAT pool and applying SNAT Automap would likely use the self-IP, which could still experience port exhaustion if not configured with sufficient addresses.

BRemove an IP address from the SNAT pool.

Removing an IP address from the SNAT pool would reduce the total number of available source ports, exacerbating the port exhaustion issue.

CAdd an address to the SNAT pool.Correct

Adding more IP addresses to the SNAT pool increases the total number of available source ports that the BIG-IP can use for SNAT connections. Each unique IP address provides a new set of approximately 64,000 source ports, directly alleviating port exhaustion.

DIncrease the timeout of the SNAT addresses.

Increasing the timeout of SNAT addresses would cause ports to remain occupied for longer, which could worsen port exhaustion rather than resolve it.

Concept tested: F5 BIG-IP SNAT port exhaustion resolution

Source: https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-local-traffic-manager-concepts/snat-automap-and-snat-pools.html

Topics

#SNAT port exhaustion#SNAT pool#troubleshooting connectivity#log analysis

Community Discussion

No community discussion yet for this question.

Full 201 Practice