300-415 · Question #357
What is the role of the Session Traversal Utilities for NAT server provided by the vBond orchestrator?
The correct answer is D. It facilitates SD-WAN routers and controllers to discover their own mapped or translated IP addresses and port numbers. The vBond orchestrator acts as a STUN (Session Traversal Utilities for NAT) server, enabling SD-WAN routers and controllers to discover their own public or translated IP addresses and port numbers when behind NAT devices.
Question
Options
- AIt prevents SD-WAN Edge routers from forming sessions with public transports among different service providers.
- BIt facilitates SD-WAN Edge routers to stay behind a NAT-enabled firewall while the transport addresses of the SD-WAN controller are unNAT-ed.
- CIt allows WAN Edge routers to form sessions among MPLS TLOCs using only public IP addresses.
- DIt facilitates SD-WAN routers and controllers to discover their own mapped or translated IP addresses and port numbers.
How the community answered
(63 responses)- A2% (1)
- B5% (3)
- C2% (1)
- D92% (58)
Why each option
The vBond orchestrator acts as a STUN (Session Traversal Utilities for NAT) server, enabling SD-WAN routers and controllers to discover their own public or translated IP addresses and port numbers when behind NAT devices.
The STUN server function does not prevent edge routers from forming sessions with public transports; it actually facilitates connectivity by revealing NAT-translated addresses to enable session establishment.
vBond's STUN role is not about keeping edge routers behind a NAT firewall while unNATing controller addresses; it helps devices discover their own translated addresses so they can communicate their reachable TLOC to others.
STUN is not specifically for MPLS TLOCs or restricted to public IP addresses; it is a general NAT traversal utility applicable to any transport where address translation is present.
vBond's STUN server role allows WAN Edge routers to send STUN binding requests and receive their externally visible NAT-translated IP address and port number in return. This enables devices behind NAT to learn their public-facing transport locator (TLOC) information, which is essential for establishing SD-WAN control and data plane sessions with other devices across the overlay.
Concept tested: vBond STUN server role for NAT address discovery
Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/system-interface/vedge-20-x/systems-interfaces-book/system-interface.html
Topics
Community Discussion
No community discussion yet for this question.