An architect is helping an organization with the Logical Design of an NSX-T Data Center solution. During discussions about centralized services NAT running on Tier-1 or Tier-0 Gateway, the customer…

Question

Options

• AAn active/active model should be used.
• BUse Reflexive NAT on the uplink interface.
• CDNAT should be applied on the uplink interface.
• DMix stateful and stateless NAT rules on the same gateway.
• EThe high availability mode supported is only Active-Standby.

• A
  14% (3)
• B
  9% (2)
• C
  73% (16)
• D
  5% (1)

Explanation

Stateful services: Require HA mode configured as Active-Standby Stateless services: Require HA mode configured as Active-Active You can create different NAT rules: - Source NAT (SNAT) translates the source IP of the outbound packets to a known public IP address so that the application can communicate with the outside world without using its private IP address. SNAT also tracks the reply. - Destination NAT (DNAT) enables access to internal private IP addresses from the outside world by translating the destination IP address when inbound communication is initiated. DNAT also takes care of the reply. For both SNAT and DNAT, users can apply NAT rules based on the 5- tuple match criteria. - Reflexive NAT rules are stateless access control lists (ACLs) that must be defined in both directions. These rules do not track the connection. Reflexive NAT rules are applied when stateful NAT cannot be used. For example, when a Tier-0 gateway is running in active-active equal-cost multipath (ECMP) mode, you cannot configure stateful NAT because asymmetrical paths might

No community discussion yet for this question.