2V0-41.24 Question 171
Single answerAn organization has deployed a distributed firewall using VMware NSX-T Data Center and configured stateful active-active NAT to allow external users to access internal resources. However, they observe inconsistent behavior in connection persistence when users connect via multiple NAT gateways. What is the primary requirement to ensure consistent session persistence in this setup?
- A
Enable session synchronization between NAT gateways.
- B
Configure static NAT instead of active-active NAT.
- C
Implement a central load balancer to distribute sessions across NAT gateways.
- D
Restrict NAT traffic to a single gateway by disabling active-active mode.
Show answer and explanation
Correct answer: A
Explanation
In a stateful active-active NAT configuration, multiple NAT gateways handle traffic simultaneously. For session persistence, it is critical to synchronize NAT session states across gateways. Without session synchronization, packets for the same session may be processed by different gateways, leading to inconsistent behavior. Enabling session synchronization ensures all gateways have the session state information required for seamless operation.
- A. Correct.
Correct. Enabling session synchronization between NAT gateways is essential for maintaining consistent session persistence in stateful active-active NAT. This ensures that session state is shared across gateways.
- B. Incorrect.
Incorrect. Static NAT is not required to resolve the issue of inconsistent session persistence in active-active NAT. Stateful active-active NAT can function correctly with session synchronization.
- C. Incorrect.
Incorrect. A central load balancer is not a requirement for ensuring session persistence in stateful active-active NAT. The issue lies in session state sharing between the gateways.
- D. Incorrect.
Incorrect. Disabling active-active mode would restrict scalability and high availability benefits, and is not necessary if session synchronization is implemented.