nerdexam
F5

201 · Question #41

A BIGIP has a virtual server at 150.150.10.10:80 with SNAT automap configured. This BIGIP also has a SNAT at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other sett

The correct answer is C. Floating self IP address on VLAN where the packet leaves the system. This question tests the understanding of SNAT precedence on an F5 BIG-IP when both virtual server SNAT automap and a separate SNAT list are configured.

Section 2: Configure Load Balancing Features

Question

A BIGIP has a virtual server at 150.150.10.10:80 with SNAT automap configured. This BIGIP also has a SNAT at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other settings are at their default states. If a client with the IP address 200.200.1.1 sends a request to the virtual server, what is the source IP address when the associated packet is sent to the pool member.

Options

  • A200.200.1.1
  • B150.150.10.11
  • CFloating self IP address on VLAN where the packet leaves the system
  • DFloating self IP address on VLAN where the packet arrives on the system

How the community answered

(39 responses)
  • A
    5% (2)
  • B
    10% (4)
  • C
    82% (32)
  • D
    3% (1)

Why each option

This question tests the understanding of SNAT precedence on an F5 BIG-IP when both virtual server SNAT automap and a separate SNAT list are configured.

A200.200.1.1

SNAT automap is configured on the virtual server, which means Source Network Address Translation will occur, changing the client's original source IP address.

B150.150.10.11

The description implies the 'SNAT at 150.150.10.11' is a standalone SNAT object and not explicitly applied as a SNAT pool to the virtual server itself, thus the virtual server's own SNAT automap takes precedence.

CFloating self IP address on VLAN where the packet leaves the systemCorrect

When a virtual server has SNAT automap configured, the BIG-IP system selects a self-IP address on the VLAN where the packet leaves the system to the pool member. It prioritizes using a floating self-IP address if one is available on that egress VLAN for consistent source IP translation.

DFloating self IP address on VLAN where the packet arrives on the system

SNAT automap translates the source IP for traffic exiting the BIG-IP towards the backend server, making the self-IP on the *outbound* VLAN relevant, not the inbound VLAN.

Concept tested: F5 BIG-IP SNAT precedence and automap behavior

Source: https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-systems-basics-administration/understanding-big-ip-network-address-translation-nat.html

Topics

#SNAT automap#SNAT configuration#source IP address#virtual server

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 201 Practice