Which command can be used to query the session for the following services? UDP VPN:public -> public 1.1.1.1: 30199 [2.2.2.2 : 3456] -> 3.3.3.3 : 33435 [4.4.4.4 : 33435]

Question

Options

• Adisplay firewall session table source global 1.1.1.1 destination inside 3.3.3.3
• Bdisplay firewall session table source global 1.1.1.1 destination global 3.3.3.3
• Cdisplay firewall session table source inside 1.1.1.1 destination global 3.3.3.3
• Ddisplay firewall session table source inside 1.1.1.1 destination inside 3.3.3.3.

• A
  3% (1)
• B
  8% (3)
• C
  70% (26)
• D
  19% (7)

Explanation

Option C is correct because the session format 1.1.1.1:30199 [2.2.2.2:3456] -> 3.3.3.3:33435 [4.4.4.4:33435] shows the original (pre-NAT) address first, with the translated address in brackets - so 1.1.1.1 is the inside (original) source and 3.3.3.3 is the global (pre-DNAT, publicly-visible) destination, making source inside 1.1.1.1 destination global 3.3.3.3 the only matching query.

Options A and B are wrong because they use source global 1.1.1.1 - but 1.1.1.1 is the original (inside) source, not the NAT-translated one; the global source is actually 2.2.2.2. Option D fails because destination inside 3.3.3.3 is incorrect - 3.3.3.3 is the pre-DNAT (global) destination; the inside destination after translation is 4.4.4.4.

Memory tip: Read the session left-to-right: the IP outside brackets is the "inside" (original) address, and the IP inside brackets is the translated counterpart. Match your query keywords to whichever version of the IP you're searching for - if you're using the bracketed IP, flip the keyword.

No community discussion yet for this question.