nerdexam
Cisco

400-007 · Question #176

You are designing the routing design for two merging companies that have overlapping IP address space. Which of these must you consider when developing the routing and NAT design?

The correct answer is B. Global to local NAT translation is done before routing. When designing NAT for overlapping IP address spaces, the critical consideration is that inbound (global-to-local) NAT translation occurs before the routing lookup, which directly determines how routing tables must be structured.

Designing Network Infrastructure

Question

You are designing the routing design for two merging companies that have overlapping IP address space. Which of these must you consider when developing the routing and NAT design?

Options

  • ALocal to global NAT translation is done after routing
  • BGlobal to local NAT translation is done before routing.
  • CLocal to global NAT translation is done before policy-based routing
  • DGlobal to local NAT translation is done after policy-based routing.

How the community answered

(58 responses)
  • A
    5% (3)
  • B
    67% (39)
  • C
    19% (11)
  • D
    9% (5)

Why each option

When designing NAT for overlapping IP address spaces, the critical consideration is that inbound (global-to-local) NAT translation occurs before the routing lookup, which directly determines how routing tables must be structured.

ALocal to global NAT translation is done after routing

While outbound local-to-global NAT does occur after routing, this is the less critical design constraint for overlapping IP space because the routing lookup already uses the correct local address before any translation takes place.

BGlobal to local NAT translation is done before routing.Correct

In Cisco IOS NAT processing, for packets arriving from the outside (global-to-local direction), the NAT translation is applied first before the routing table is consulted, meaning the router makes its forwarding decision based on the post-translation local destination address. For merging companies with overlapping IP address space, this means the internal routing tables must contain routes for the translated local addresses rather than the original global addresses - otherwise packets will be dropped after translation due to no matching route. Misunderstanding this order leads to black-holed traffic that passes NAT but cannot be forwarded because the routing design was built around pre-NAT addresses.

CLocal to global NAT translation is done before policy-based routing

Local-to-global NAT translation does not occur before policy-based routing - in Cisco IOS the routing phase including PBR is evaluated first for outbound traffic, and NAT translation is applied only after the forwarding decision is made.

DGlobal to local NAT translation is done after policy-based routing.

Global-to-local NAT translation occurs before routing, not after policy-based routing - this statement inverts the actual Cisco IOS order of operations and would produce a fundamentally incorrect NAT and routing design for overlapping address spaces.

Concept tested: NAT order of operations for overlapping IP address design

Source: https://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/6209-5.html

Topics

#NAT#overlapping IP space#routing order#company merger

Community Discussion

No community discussion yet for this question.

Full 400-007 Practice