A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arrive on. What could best accomplish this goal?

Question

Accepted Answer

B. Some virtual servers could be associated with SNAT pools and others not associated with SNAT Virtual servers provide a point of control for enabling or disabling SNAT. By associating a SNAT pool or automap with certain virtual servers, and explicitly not associating SNAT with others, the BIG-IP can perform source address translation for traffic handled by the configured virtual servers while passing through traffic from unconfigured virtual servers without translation. This method directly achieves differentiation based on the virtual server.

Answer

A. A SNAT for all addresses could be defined, and then disable the SNAT processing for select VLANs. Disabling SNAT processing for VLANs would apply to all traffic on those VLANs, not just traffic processed by specific virtual servers, failing to meet the requirement for virtual server-based differentiation.

Answer

C. The decision to perform source address translation is always based on VLAN. Thus, the goal cannot SNAT decisions are not exclusively based on VLANs; virtual server configuration, SNAT pools, and iRules offer more granular control over source address translation.

Answer

D. The decision to perform source address translation is always based on a client's address (or While SNAT can be based on client IP (e.g., using SNAT lists), it can also be configured per virtual server, allowing for decisions not solely based on the client's address.

A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arr

Question

Options

How the community answered

Why each option

Topics

Community Discussion