nerdexam
F5

201 · Question #306

A BIG-IP has a virtual server at 150.150.10.10:80 with SNAT automap configured. This BIG-IP also has a SNAT at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other…

The correct answer is C. Floating self IP address on VLAN where the packet leaves the system. A specific SNAT object configured to match the client's source IP takes precedence over SNAT automap configured on the virtual server, translating the source IP to the floating self-IP of the egress VLAN.

Section 2: Configure Load Balancing Features

Question

A BIG-IP has a virtual server at 150.150.10.10:80 with SNAT automap configured. This BIG-IP also has a SNAT at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other settings are at their default states. If a client with the IP address 200.200.1.1 sends a request to the virtual server, what is the source IP address when the associated packet is sent to the pool member?

Options

  • A200.200.1.1
  • B150.150.10.11
  • CFloating self IP address on VLAN where the packet leaves the system
  • DFloating self IP address on VLAN where the packet arrives on the system

How the community answered

(32 responses)
  • A
    25% (8)
  • B
    6% (2)
  • C
    59% (19)
  • D
    9% (3)

Why each option

A specific SNAT object configured to match the client's source IP takes precedence over SNAT automap configured on the virtual server, translating the source IP to the floating self-IP of the egress VLAN.

A200.200.1.1

The source IP would be translated because both a specific SNAT object and SNAT automap are configured, ensuring the client IP is not preserved.

B150.150.10.11

150.150.10.11 is the identifier for the specific SNAT, but the actual source IP used for outbound connections by such a SNAT, unless a SNAT pool is explicitly defined, is the floating self-IP of the egress VLAN.

CFloating self IP address on VLAN where the packet leaves the systemCorrect

Although the virtual server has SNAT automap, a specific SNAT object is also configured to match the client's source IP (200.200.1.1). Specific SNAT configurations take precedence over SNAT automap, and when a specific SNAT object is used without an explicit SNAT pool, it typically translates the source IP to the floating self-IP address of the VLAN through which the packet exits the BIG-IP system.

DFloating self IP address on VLAN where the packet arrives on the system

The source IP used for translation is determined by where the packet leaves the system (egress VLAN), not where it arrives (ingress VLAN).

Concept tested: SNAT precedence and automap behavior

Source: https://support.f5.com/csp/article/K7820

Topics

#SNAT automap#explicit SNAT#SNAT precedence#source IP address

Community Discussion

No community discussion yet for this question.

Full 201 Practice