201 · Question #342
A BIG-IP has two load balancing virtual servers at 150.150.10.10:80 and 150.150.10.10:443. The port 80 virtual server has SNAT automap configured. There is also a SNAT configured at 150.150.10.11…
The correct answer is B. 150.150.10.11. This question determines the final source IP address after SNAT processing, considering different SNAT configurations and their order of precedence.
Question
A BIG-IP has two load balancing virtual servers at 150.150.10.10:80 and 150.150.10.10:443. The port 80 virtual server has SNAT automap configured. There is also a SNAT configured at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other settings are at their default states. If a client with the IP address 200.200.1.1 sends a request to https://150.150.10.10, What is the source IP address when the associated packet is sent to the pool member?
Options
- A200.200.1.1
- B150.150.10.11
- CFloating self IP address on VLAN where the packet leaves the system
- DFloating self IP address on VLAN where the packet arrives on the system
How the community answered
(32 responses)- A9% (3)
- B84% (27)
- C3% (1)
- D3% (1)
Why each option
This question determines the final source IP address after SNAT processing, considering different SNAT configurations and their order of precedence.
The client's original IP address would only remain if no SNAT was applied, but a matching SNAT object is explicitly configured.
A specifically configured SNAT object (with a defined source address range and SNAT IP) always takes precedence over SNAT Automap. Since the client's IP 200.200.1.1 matches the defined SNAT object's source range, the packet is translated to the SNAT address 150.150.10.11.
SNAT Automap, which would use a floating self-IP on the egress VLAN, is superseded by the more specific, explicitly configured SNAT object.
SNAT Automap, which would use a floating self-IP on the ingress VLAN (though usually egress), is lower in precedence than a specific SNAT object.
Concept tested: SNAT precedence on BIG-IP
Source: https://techdocs.f5.com/kb/en-us/solutions/public/13000/000/sol13030.html
Topics
Community Discussion
No community discussion yet for this question.