Refer to the exhibit. The firewall has been configured from NAT 192.168.108.2 to 100.64.0.1. Which configuration changes are needed for an Expressway-E with dual network interfaces? A. B. C. D.

Question

Exhibits

Options

• AExternal LAN interface: LAN 2 LAN 1 IPv4 static NAT mode: On LAN 1 IPv4 static NAT address: 100.64.0.1 LAN 2 IPv4 static NAT mode: On LAN 2 IPv4 static NAT address: 100.64.0.1
• BExternal LAN interface: LAN 2 LAN 2 IPv4 static NAT mode: On LAN 2 IPv4 static NAT address: 100.64.0.1
• CExternal LAN interface: LAN 1 LAN 1 IPv4 static NAT mode: On LAN 1 IPv4 static NAT address: 100.64.0.1
• DExternal LAN interface: LAN 2 LAN 1 IPv4 static NAT mode: On LAN 1 IPv4 static NAT address: 100.64.0.1

• A
  6% (2)
• B
  81% (26)
• D
  13% (4)

Explanation

In a dual-NIC Expressway-E deployment, LAN 1 is the internal/DMZ-facing interface and LAN 2 is the external/public-facing interface. NAT static mapping only applies to the external interface (LAN 2), because that is the interface whose private IP address (192.168.108.2) is being mapped to a public IP (100.64.0.1) by the firewall. The configuration requires: setting the External LAN interface to LAN 2, enabling LAN 2 IPv4 static NAT mode, and entering 100.64.0.1 as the LAN 2 static NAT address. LAN 1 does not need NAT configuration because it communicates on the internal DMZ network where no NAT translation occurs. Applying NAT settings to LAN 1 as well (option A) would be incorrect and could cause signaling issues.

No community discussion yet for this question.