JN0-633 · Question #95
user@srx> show security flow session Session ID. 7724, Policy namE. default-permit/4, Timeout: 2 In: 1.1.70.6/17 --> 100.0.0.1/2326;icmp, IF. ge-0/0/3 Out: 10.1.10.5/2326 --> 1.1.70.6/17;icmp, IF…
The correct answer is B. The sessions shown indicate static NAT processing. C. ICMP traffic is passing in both directions. See the full explanation below for the reasoning.
Question
user@srx> show security flow session Session ID. 7724, Policy namE. default-permit/4, Timeout: 2 In: 1.1.70.6/17 --> 100.0.0.1/2326;icmp, IF. ge-0/0/3 Out:
10.1.10.5/2326 --> 1.1.70.6/17;icmp, IF. ge-0/0/2 Session ID. 18408, Policy namE. default-permit/4, Timeout: 2 In: 10.1.10.5/64513 --> 1.1.70.6/512;icmp, IF. ge-0/0/2.0 Out:
1.1.70.6/512 --> 100.0.0.1/64513;icmp, IF. ge-0/0/3.10 A user has reported a traffic drop issue between a host with the 10.1.10.5 internal IP address and a host with the 1.1.70.6 IP address. The traffic transits an SRX240 acting as a NAT translator. You are investigating the issue on the SRX240 using the output shown in the exhibit. Regarding this scenario, which two statements are true? (Choose two.)
Options
- AThe sessions shown indicate interface-based NAT processing.
- BThe sessions shown indicate static NAT processing.
- CICMP traffic is passing in both directions.
- DICMP traffic is passing in one direction.
How the community answered
(26 responses)- A8% (2)
- B81% (21)
- D12% (3)
Community Discussion
No community discussion yet for this question.