2V0-41.24 Question 363
Single answerYou are tasked with configuring Network Address Translation (NAT) in an NSX-T Data Center environment to allow internal VMs to access the Internet. The internal network uses the IP range 192.168.10.0/24, and the external network is connected to a Tier-0 Gateway with an external IP of 203.0.113.5. Which NAT rule configuration should you use to achieve this?
- A
Create a SNAT rule on the Tier-0 Gateway with a source IP of 192.168.10.0/24 and translate it to 203.0.113.5.
- B
Create a DNAT rule on the Tier-1 Gateway with a destination IP of 192.168.10.0/24 and translate it to 203.0.113.5.
- C
Create a DNAT rule on the Tier-0 Gateway with a destination IP of 203.0.113.5 and translate it to 192.168.10.0/24.
- D
Create a SNAT rule on the Tier-1 Gateway with a source IP of 192.168.10.0/24 and translate it to 203.0.113.5.
Show answer and explanation
Correct answer: A
Explanation
To allow internal VMs to access the Internet, a Source NAT (SNAT) rule must be configured on the Tier-0 Gateway. The SNAT rule translates the internal IP range (192.168.10.0/24) into the external IP address (203.0.113.5) so that the traffic appears to originate from the external IP when accessing the Internet. Configuring the rule on the Tier-0 Gateway ensures the rule applies to traffic leaving the NSX-T environment.
- A. Correct.
This is the correct configuration. A Source NAT (SNAT) rule is needed to translate the internal source IP range (192.168.10.0/24) to the external IP address (203.0.113.5) so that traffic can go out to the Internet.
- B. Incorrect.
This is incorrect because a Destination NAT (DNAT) rule is not needed in this scenario. DNAT is used to translate destination IPs, typically for incoming traffic, not for outgoing traffic.
- C. Incorrect.
This is incorrect because a DNAT rule translating the external IP (203.0.113.5) to the internal IP range (192.168.10.0/24) is used for inbound traffic, not for enabling internal VMs to access the Internet.
- D. Incorrect.
This is incorrect because SNAT rules should be configured on the Tier-0 Gateway for external connectivity. Configuring it on the Tier-1 Gateway would not apply to the external network.