2V0-41.24 Question 165
Select 2An organization is implementing VMware NSX and wants to configure NAT for their virtual environment. A web server in a private network needs to be accessible from the internet, while requests from the web server to external services should appear to originate from a specific public IP address. Which combination of NAT types should be configured to meet this requirement?
- A
Source NAT (SNAT) to translate the web server's private IP to the public IP for outbound traffic.
- B
Destination NAT (DNAT) to translate the public IP to the web server's private IP for inbound traffic.
- C
Reflexive NAT for bidirectional communication between the private and public IP addresses.
- D
Source NAT (SNAT) for inbound requests to the web server.
- E
Destination NAT (DNAT) for outbound requests from the web server.
Show answer and explanation
Correct answers: A, B
Explanation
To allow external clients to access a web server in a private network, Destination NAT (DNAT) is required to translate the public IP to the web server's private IP for inbound traffic. Additionally, to ensure that the web server's outbound requests appear to originate from a specific public IP address, Source NAT (SNAT) is needed. This combination of DNAT for inbound traffic and SNAT for outbound traffic is a common use case in VMware NSX NAT configurations.
- A. Correct.
Source NAT (SNAT) is used to translate the web server's private IP address to a public IP address for outbound traffic, ensuring that responses from the web server appear to originate from the specific public IP address.
- B. Correct.
Destination NAT (DNAT) is used to translate the incoming requests from a public IP address to the web server's private IP address, allowing external clients to access the web server.
- C. Incorrect.
Reflexive NAT is not applicable in this scenario. Reflexive NAT dynamically creates rules for outbound traffic but does not handle the static requirements of this use case.
- D. Incorrect.
Source NAT (SNAT) is not used for inbound requests. Instead, it is applied to outbound traffic to translate private source addresses to public ones.
- E. Incorrect.
Destination NAT (DNAT) is not used for outbound requests. Instead, it is applied to inbound traffic to translate public destination addresses to private ones.