Central NAT was configured on a FortiGate firewall. A sniffer ICMP packets out to a host on the Internet egresses with the port1 IP address instead of the virtual IP (VIP) that was configured Referring to the exhibit, which configuration change will ensure that ICMP traffic is also translated?

Question

Accepted Answer

B. config firewall central-snat-map
 edit 1
 unset protocol
 next
end

Answer

A. config firewall central-snat-map
 edit 1
 set protocol 1
 next
end

Answer

C. config firewall ippool
 edit "secondary_ip"
 set arp-intf 'port1'
 next
end

Answer

D. config firewall central-snat-map
 edit 1
 set orig-addr "all"
 next
end

Central NAT was configured on a FortiGate firewall. A sniffer ICMP packets out to a host on the Internet egresses with the port1 IP address instead of the virtual IP (VIP) that was configured…

Question

Options

How the community answered

Community Discussion