2V0-41.24 Question 167
Single answerAn organization is deploying NSX-T Data Center in their environment to manage network virtualization. They want to enable external users to access a web server hosted in the private network. However, the private network uses a non-routable IP address space. Which type of NAT configuration should be used in this scenario?
- A
Source NAT (SNAT)
- B
Destination NAT (DNAT)
- C
Reflexive NAT
- D
Static NAT
Show answer and explanation
Correct answer: B
Explanation
Destination NAT (DNAT) is the appropriate choice in this scenario because it allows an external IP address to be mapped to an internal IP address. This enables external users to access the web server hosted in a private network with a non-routable IP address. DNAT ensures that incoming requests to a public IP are forwarded to the appropriate private IP in the internal network.
- A. Incorrect.
Source NAT (SNAT) is typically used when internal systems need to access external resources. It translates the internal source IP address to a public IP address, but it is not suitable for allowing external access to internal resources.
- B. Correct.
Destination NAT (DNAT) is used to map an external IP address to an internal IP address. This is commonly used for allowing external users to access resources hosted in a private network, such as a web server.
- C. Incorrect.
Reflexive NAT dynamically creates NAT rules for return traffic when an outgoing session is initiated. It is not used for static or pre-configured inbound access to internal resources.
- D. Incorrect.
Static NAT provides a one-to-one mapping between internal and external IP addresses and is not the recommended solution for dynamic external access to specific services like a web server.