nerdexam
F5

201 · Question #80

Which two statements are true about SNATs. (Choose two.)

The correct answer is A. SNATs are enabled on all VLANs, by default. C. SNATs can be configured within a Virtual Server definition. SNATs are enabled globally on all VLANs by default and can also be configured directly within a virtual server definition for more granular control.

Section 2: Configure Load Balancing Features

Question

Which two statements are true about SNATs. (Choose two.)

Options

  • ASNATs are enabled on all VLANs, by default.
  • BSNATs can be configured within a Profile definition.
  • CSNATs can be configured within a Virtual Server definition.
  • DSNAT's are enabled only on the VLAN where origin traffic arrives, by default

How the community answered

(29 responses)
  • A
    93% (27)
  • B
    3% (1)
  • D
    3% (1)

Why each option

SNATs are enabled globally on all VLANs by default and can also be configured directly within a virtual server definition for more granular control.

ASNATs are enabled on all VLANs, by default.Correct

By default, the BIG-IP system enables SNAT Auto Map across all VLANs, meaning it will automatically translate the source IP address of traffic leaving the BIG-IP to a self-IP address on the egress VLAN.

BSNATs can be configured within a Profile definition.

SNATs are not configured within a profile definition; profiles define behavior for protocols, SSL, or HTTP, but source address translation is configured at the virtual server level or as a global SNAT.

CSNATs can be configured within a Virtual Server definition.Correct

SNATs can be configured directly on a virtual server by setting its 'Source Address Translation' property to 'Auto Map' or by assigning a specific SNAT pool, providing granular control over source translation for that virtual server.

DSNAT's are enabled only on the VLAN where origin traffic arrives, by default

This statement is incorrect because, by default, SNAT Auto Map is enabled globally and applies across all VLANs, translating traffic as it exits any VLAN, not just the ingress VLAN.

Concept tested: SNAT configuration and default behavior

Source: https://techdocs.f5.com/en-us/big-ip-15-1-0/big-ip-local-traffic-management-implementations/configuring-snat-pools-and-auto-map.html

Topics

#SNAT#VLANs#virtual server#SNAT configuration

Community Discussion

No community discussion yet for this question.

Full 201 Practice