2V0-41.24 Question 365
Single answerA company has deployed a VMware NSX environment and configured a Tier-1 Gateway to provide routing for a set of web application virtual machines. The company wants to allow users on the internet to access the web application using a public IP address while keeping the backend virtual machines on a private IP subnet. Which configuration should you implement on the Tier-1 Gateway to meet this requirement?
- A
Configure a Destination NAT (DNAT) rule to translate the public IP address to the private IP address of the backend virtual machines.
- B
Configure a Source NAT (SNAT) rule to translate the private IP address of the backend virtual machines to a public IP address.
- C
Configure a Load Balancer on the Tier-1 Gateway with the public IP address and backend pool containing the private IP addresses.
- D
Enable DHCP on the Tier-1 Gateway to dynamically assign public IP addresses to the backend virtual machines.
Show answer and explanation
Correct answer: A
Explanation
This scenario requires configuring NAT to allow external access to backend virtual machines on a private subnet. Destination NAT (DNAT) is the correct approach because it allows traffic destined for a public IP address to be translated and forwarded to private IP addresses within the network. This ensures the web application is accessible to external users while maintaining the private addressing of the backend VMs.
- A. Correct.
Correct. A Destination NAT (DNAT) rule is used to translate a public IP address to a private IP address for inbound traffic, allowing external users to access the web application hosted on private IPs.
- B. Incorrect.
Incorrect. Source NAT (SNAT) is used to translate private IP addresses to public IPs for outbound traffic, which is not the requirement in this scenario.
- C. Incorrect.
Incorrect. While a Load Balancer might help with distributing traffic, it is not specified in the question, and it does not directly address NAT configuration.
- D. Incorrect.
Incorrect. Enabling DHCP does not relate to NAT configuration and does not solve the requirement of making the web application accessible using a public IP.