nerdexam
F5

201 · Question #79

A site wishes to perform source address translation on packets arriving from the Internet for clients using some pools but not others. The determination is not based on the client's IP address, but…

The correct answer is A. A SNAT for all addresses could be defined, and then disable the SNAT processing for select pools. To conditionally apply SNAT based on the assigned backend pool, define a global SNAT and then disable it specifically for pools where source address translation is not desired.

Section 2: Configure Load Balancing Features

Question

A site wishes to perform source address translation on packets arriving from the Internet for clients using some pools but not others. The determination is not based on the client's IP address, but on the pool they are load balanced to. What could best accomplish this goal.

Options

  • AA SNAT for all addresses could be defined, and then disable the SNAT processing for select pools.
  • BThe decision to perform source address translation is always based on VLAN. Thus, the goal cannot be
  • CFor each virtual server, regardless their default load balancing pools, association with SNAT pools could vary
  • DThe decision to perform source address translation is always based on a client's address (or network). Thus,

How the community answered

(25 responses)
  • A
    72% (18)
  • B
    8% (2)
  • C
    4% (1)
  • D
    16% (4)

Why each option

To conditionally apply SNAT based on the assigned backend pool, define a global SNAT and then disable it specifically for pools where source address translation is not desired.

AA SNAT for all addresses could be defined, and then disable the SNAT processing for select pools.Correct

F5 BIG-IP allows the configuration of a SNAT (Source Network Address Translation) that applies broadly, and then provides the flexibility to disable SNAT processing for specific pools or nodes, thus achieving selective source address translation based on the destination pool.

BThe decision to perform source address translation is always based on VLAN. Thus, the goal cannot be

The decision to perform source address translation can be granularly controlled beyond just VLANs, including virtual server, pool, or iRule logic.

CFor each virtual server, regardless their default load balancing pools, association with SNAT pools could vary

While SNAT pools can be associated with virtual servers, the best way to achieve SNAT control *per pool* is often by disabling SNAT directly on the pool or using iRules, rather than varying SNAT pool associations per virtual server.

DThe decision to perform source address translation is always based on a client's address (or network). Thus,

The decision to perform source address translation can be based on various factors, including virtual server, pool, and iRule logic, not solely on the client's address.

Concept tested: Selective SNAT application per pool

Source: https://techdocs.f5.com/en-us/big-ip-15-1-0/big-ip-local-traffic-management-implementations/configuring-snat-pools-and-auto-map.html

Topics

#SNAT#source address translation#SNAT pools#selective SNAT#virtual server

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 201 Practice