JN0-633 · Question #82
Click the Exhibit button. security { nat { destination { pool Web-Server { address 10.0.1.5/32; } rule-set From-Internet { from zone Untrust; rule To-Web-Server { match { source-address 0.0.0.0/0…
The correct answer is D. Create a new rule for the new address in the [edit security nat destination rule-set From-Internet] hierarchy. destination-nat-translation-configuring.html
Question
Click the Exhibit button. security { nat { destination { pool Web-Server { address 10.0.1.5/32; } rule-set From-Internet { from zone Untrust; rule To-Web-Server { match { source-address 0.0.0.0/0; destination-address 172.16.1.7/32; } then { destination-nat pool Web-Server; } } } } } zones { security-zone Untrust { address-book { address Web-Server-External 172.16.1.7/32; address Web-Server-Internal 10.0.1.5/32; } interfaces { ge-0/0/0.0; } } security-zone DMZ { address-book { address Web-Server-External 172.16.1.7/32; address Web-Server-Internal 10.0.1.5/32; } interfaces { ge-0/0/1.0; } } } } You are migrating from one external address block to a different external address block. You want to enable a smooth transition to the new address block. You temporarily want to allow external users to contact the Web server using both the existing external address as well as the new external address 192.168.1.1. How do you accomplish this goal?
Options
- AAdd address 192.168.1.1/32 under [edit security nat destination pool Web-Server].
- BChange the address Web-Server-Ext objects to be address-set objects that include both addresses.
- CChange the destination address under [edit security nat destination rule-set From-Internet rule
- DCreate a new rule for the new address in the [edit security nat destination rule-set From-Internet] hierarchy.
How the community answered
(33 responses)- A3% (1)
- B9% (3)
- C3% (1)
- D85% (28)
Explanation
destination-nat-translation-configuring.html
Topics
Community Discussion
No community discussion yet for this question.