352-001 · Question #418
You are developing the routing design for two merging companies that have overlapping IP address space. What must you consider when developing the routing and NAT design?
The correct answer is A. Global to local NAT translation is done before routing. Understanding NAT operation order is critical when overlapping address space exists. On Cisco IOS, the order of operations differs by traffic direction: for inbound packets (outside-to-inside), 'global-to-local' translation (destination NAT) occurs BEFORE the routing lookup…
Question
You are developing the routing design for two merging companies that have overlapping IP address space. What must you consider when developing the routing and NAT design?
Options
- AGlobal to local NAT translation is done before routing.
- BLocal to global NAT translation is done after routing.
- CGlobal to local NAT translation is done after policy-based routing.
- DLocal to global NAT translation is done before policy-based routing.
How the community answered
(18 responses)- A78% (14)
- B6% (1)
- C6% (1)
- D11% (2)
Explanation
Understanding NAT operation order is critical when overlapping address space exists. On Cisco IOS, the order of operations differs by traffic direction: for inbound packets (outside-to-inside), 'global-to-local' translation (destination NAT) occurs BEFORE the routing lookup. This means the router first translates the packet's destination address from the outside global IP to the inside local IP, then makes its routing decision based on the translated address. For outbound packets (inside-to-outside), 'local-to-global' translation (source NAT) occurs AFTER the routing lookup. This ordering is essential when designing NAT for overlapping address spaces because the routing table must contain routes for the post-translation (local) addresses, not the pre-translation (global) addresses, for inbound flows. Misunderstanding this ordering leads to incorrect route table design and broken connectivity.
Topics
Community Discussion
No community discussion yet for this question.