nerdexam
F5

201 · Question #37

A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arr

The correct answer is B. Some virtual servers could be associated with SNAT pools and others not associated with SNAT pools.. To selectively apply source address translation (SNAT) based on which virtual server client packets arrive on, the virtual servers themselves must be configured to use or not use SNAT.

Section 2: Configure Load Balancing Features

Question

A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arrive on. What could best accomplish this goal.

Options

  • AA SNAT for all addresses could be defined, and then disable the SNAT processing for select VLANs.
  • BSome virtual servers could be associated with SNAT pools and others not associated with SNAT pools.
  • CThe decision to perform source address translation is always based on VLAN. Thus, the goal cannot be
  • DThe decision to perform source address translation is always based on a client's address (or network). Thus,

How the community answered

(60 responses)
  • A
    7% (4)
  • B
    75% (45)
  • C
    15% (9)
  • D
    3% (2)

Why each option

To selectively apply source address translation (SNAT) based on which virtual server client packets arrive on, the virtual servers themselves must be configured to use or not use SNAT.

AA SNAT for all addresses could be defined, and then disable the SNAT processing for select VLANs.

Disabling SNAT processing for select VLANs would broadly affect all traffic on those VLANs, irrespective of the virtual server, which does not meet the per-virtual-server requirement.

BSome virtual servers could be associated with SNAT pools and others not associated with SNAT pools.Correct

By associating specific virtual servers with SNAT pools or enabling automap on them, the BIG-IP can apply source address translation only to traffic processed by those particular virtual servers. This method allows for granular control, ensuring that only client connections hitting the designated virtual servers have their source IP translated, aligning with the requirement for determination based on the virtual server.

CThe decision to perform source address translation is always based on VLAN. Thus, the goal cannot be

The decision to perform source address translation can indeed be based on virtual server configuration, not exclusively on VLANs, making this statement incorrect.

DThe decision to perform source address translation is always based on a client's address (or network). Thus,

The question explicitly states that the determination is not based on the client's IP address, rendering any client IP-based approach unsuitable for this specific goal.

Concept tested: SNAT application based on virtual server configuration

Source: https://techdocs.f5.com/en-us/big-ip-15-1-0/big-ip-tmos-implementations/source-network-address-translation.html

Topics

#SNAT#source address translation#virtual server#selective SNAT

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 201 Practice