Egress PE NAT is being used via a single centralized router to provide Internet access to L3VPN customers. Which description of the NAT operation is true?

Question

Options

• AUsers m different VRFs cannot share the same outside global IP address
• BThe NAT table contains a field to identify the inside VRF of a translation
• CMultiple address pools are needed for the same L3VPN because each site has a separate NAT
• DThe different L3VPNs using the Internet access must not have IP overlaps internally

• B
  88% (21)
• C
  8% (2)
• D
  4% (1)

Explanation

In Egress PE NAT for L3VPN Internet access, the NAT process must track which VRF an inside address belongs to because multiple VRFs may have overlapping private IP address spaces. To correctly translate and de-translate traffic, the NAT translation table includes a VRF identifier field alongside the inside local and inside global addresses. This allows the single centralized router to distinguish between identical private addresses from different VRFs. Options A and D are incorrect because VRF-aware NAT specifically allows address overlap between VRFs. Option C is wrong because a single address pool can serve multiple sites within the same VPN.

No community discussion yet for this question.