201 · Question #80
Which two statements are true about SNATs. (Choose two.)
The correct answer is A. SNATs are enabled on all VLANs, by default. C. SNATs can be configured within a Virtual Server definition. SNATs are enabled globally on all VLANs by default and can also be configured directly within a virtual server definition for more granular control.
Question
Which two statements are true about SNATs. (Choose two.)
Options
- ASNATs are enabled on all VLANs, by default.
- BSNATs can be configured within a Profile definition.
- CSNATs can be configured within a Virtual Server definition.
- DSNAT's are enabled only on the VLAN where origin traffic arrives, by default
How the community answered
(29 responses)- A93% (27)
- B3% (1)
- D3% (1)
Why each option
SNATs are enabled globally on all VLANs by default and can also be configured directly within a virtual server definition for more granular control.
By default, the BIG-IP system enables SNAT Auto Map across all VLANs, meaning it will automatically translate the source IP address of traffic leaving the BIG-IP to a self-IP address on the egress VLAN.
SNATs are not configured within a profile definition; profiles define behavior for protocols, SSL, or HTTP, but source address translation is configured at the virtual server level or as a global SNAT.
SNATs can be configured directly on a virtual server by setting its 'Source Address Translation' property to 'Auto Map' or by assigning a specific SNAT pool, providing granular control over source translation for that virtual server.
This statement is incorrect because, by default, SNAT Auto Map is enabled globally and applies across all VLANs, translating traffic as it exits any VLAN, not just the ingress VLAN.
Concept tested: SNAT configuration and default behavior
Source: https://techdocs.f5.com/en-us/big-ip-15-1-0/big-ip-local-traffic-management-implementations/configuring-snat-pools-and-auto-map.html
Topics
Community Discussion
No community discussion yet for this question.