2V0-41.24 Question 364
Single answerAn organization is using VMware NSX-T Data Center and needs to configure NAT on a Tier-1 Gateway to allow internal virtual machines (VMs) to access external resources on the internet. The internal network uses the IP range 192.168.10.0/24, and the organization wants to map all outbound traffic to the public IP address 203.0.113.2. Which type of NAT rule should be configured, and what is the key configuration parameter required?
- A
Configure a Source NAT (SNAT) rule with the public IP address 203.0.113.2 as the translated address
- B
Configure a Destination NAT (DNAT) rule with the internal IP range 192.168.10.0/24 as the translated address
- C
Configure a Source NAT (SNAT) rule with the internal IP range 192.168.10.0/24 as the translated address
- D
Configure a Destination NAT (DNAT) rule with the public IP address 203.0.113.2 as the translated address
Show answer and explanation
Correct answer: A
Explanation
To allow internal VMs to access external resources, a Source NAT (SNAT) rule must be configured on the Tier-1 Gateway. SNAT translates internal IP addresses into a public IP address, enabling outbound communication to the internet. Configuring 203.0.113.2 as the translated address ensures that all outbound traffic from the internal network appears to originate from this public IP address.
- A. Correct.
Correct: Source NAT (SNAT) is used to translate internal IP addresses to a public IP address for outbound traffic. Configuring the public IP address 203.0.113.2 as the translated address ensures that all internal traffic appears to come from this address when accessing external resources.
- B. Incorrect.
Incorrect: Destination NAT (DNAT) is used to translate external IP addresses to internal IPs for inbound traffic. This is not suitable for outbound internet access.
- C. Incorrect.
Incorrect: Source NAT (SNAT) does not translate the internal IP range but rather maps it to a public IP address. Configuring the internal IP range as the translated address is incorrect.
- D. Incorrect.
Incorrect: Destination NAT (DNAT) with the public IP address as the translated address is used for inbound traffic redirection and not for outbound traffic.