300-820 · Question #118
An engineer must configure the zone to connect to an Expressway-E using Single NIC with NAT. The internal IP address is 192.168.10.63, and the NAT address is 203.0.113.5. What must the engineer…
The correct answer is C. traversal zone with the peer address of 203.0.113.5. When Expressway-E uses a Single NIC with NAT, it has an internal private IP (192.168.10.63) and a publicly routable NAT address (203.0.113.5). Expressway-C must be configured with a Traversal Zone (not a Neighbor Zone) because firewall traversal is required. The peer address in…
Question
An engineer must configure the zone to connect to an Expressway-E using Single NIC with NAT. The internal IP address is 192.168.10.63, and the NAT address is 203.0.113.5. What must the engineer configure on the Expressway-C to meet this requirement?
Options
- Atraversal zone with the peer address 192.168.10.63
- Bneighbor zone with the peer address 192.168.10.63
- Ctraversal zone with the peer address of 203.0.113.5
- Dneighbor zone with the peer address of 203.0.113.5
How the community answered
(33 responses)- A3% (1)
- B9% (3)
- C70% (23)
- D18% (6)
Explanation
When Expressway-E uses a Single NIC with NAT, it has an internal private IP (192.168.10.63) and a publicly routable NAT address (203.0.113.5). Expressway-C must be configured with a Traversal Zone (not a Neighbor Zone) because firewall traversal is required. The peer address in the traversal zone must be the public NAT IP (203.0.113.5), because that is the address Expressway-C must reach across the internet/DMZ boundary. Using the internal IP (192.168.10.63) would fail since Expressway-C has no direct route to it. Answer C is correct.
Topics
Community Discussion
No community discussion yet for this question.