nerdexam
Cisco

352-001 · Question #162

A company wants to use an external appliance between its data center and WAN to optimize email and HTTP communications. The traffic flow must pass this appliance in both directions. The appliance is c

The correct answer is D. Configure a route map at the data center-side interface to forward the traffic to the appliance IP address. F. Configure a route map at the WAN-side interface to forward the traffic to the appliance IP address.. Policy-Based Routing (PBR) applied via route maps on the WAN-side and data center-side interfaces redirects traffic to the single-interface appliance in both directions, ensuring symmetric traffic flow through it.

Designing Network Infrastructure

Question

A company wants to use an external appliance between its data center and WAN to optimize email and HTTP communications. The traffic flow must pass this appliance in both directions. The appliance is connected with only one interface to a Cisco IOS router and has a single IP address. Which two adjustments can you make to the network design so that the appliance is added into the traffic path? (Choose two.)

Options

  • AConfigure static routes to route the traffic to the appliance.
  • BAdjust the dynamic routing to route the traffic to the appliance.
  • CConfigure NAT to force the traffic to the appliance.
  • DConfigure a route map at the data center-side interface to forward the traffic to the appliance IP address.
  • EConfigure a route map at the appliance-facing interface to forward the traffic to the appliance IP address.
  • FConfigure a route map at the WAN-side interface to forward the traffic to the appliance IP address.

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    15% (5)
  • C
    9% (3)
  • D
    71% (24)
  • E
    3% (1)

Why each option

Policy-Based Routing (PBR) applied via route maps on the WAN-side and data center-side interfaces redirects traffic to the single-interface appliance in both directions, ensuring symmetric traffic flow through it.

AConfigure static routes to route the traffic to the appliance.

Static routes modify the routing table globally and cannot selectively redirect only specific service traffic like HTTP and email to a single-interface appliance without impacting all other traffic flows.

BAdjust the dynamic routing to route the traffic to the appliance.

Adjusting dynamic routing metrics redistributes paths at the routing protocol level and does not provide the per-flow, protocol-selective traffic steering needed to force specific traffic through a single-interface appliance.

CConfigure NAT to force the traffic to the appliance.

NAT modifies source or destination IP addresses for address translation purposes and is not a mechanism designed to transparently insert an optimization appliance into a bidirectional traffic path.

DConfigure a route map at the data center-side interface to forward the traffic to the appliance IP address.Correct

Applying a route map (PBR) on the data center-facing interface intercepts outbound traffic from the data center toward the WAN and redirects it to the appliance IP before it exits, ensuring the appliance processes traffic leaving the data center.

EConfigure a route map at the appliance-facing interface to forward the traffic to the appliance IP address.

Applying the route map on the appliance-facing interface would create a forwarding loop by redirecting traffic back toward the appliance on the very interface it already arrived from, rather than steering traffic to it from the correct ingress direction.

FConfigure a route map at the WAN-side interface to forward the traffic to the appliance IP address.Correct

Applying a route map (PBR) on the WAN-facing interface intercepts inbound traffic arriving from the WAN and redirects it to the appliance IP before it reaches the data center, ensuring the appliance processes return traffic as well.

Concept tested: Policy-Based Routing for service appliance traffic insertion

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_pi/configuration/xe-16/iri-xe-16-book/ip-route-maps.html

Topics

#Policy-Based Routing#route maps#traffic steering#WAN optimization

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice