2V0-41.24 Question 372
Select 3An organization has deployed an NSX network virtualization environment. The administrator is tasked with configuring NAT to allow virtual machines in a private network (192.168.10.0/24) to access the internet. Which configuration steps must the administrator perform to achieve this?
- A
Create a Source NAT (SNAT) rule on the Tier-1 Gateway associated with the private network.
- B
Enable NAT on the uplink interface of the Tier-0 Gateway.
- C
Configure a Destination NAT (DNAT) rule on the Tier-1 Gateway to translate incoming traffic.
- D
Assign an external IP address pool to the Tier-0 Gateway for NAT translation.
- E
Create a firewall rule to allow traffic from the private subnet to the internet.
Show answer and explanation
Correct answers: A, B, D
Explanation
To enable internet access for virtual machines in a private network, the administrator needs to configure SNAT on the Tier-1 Gateway to translate the private addresses to public addresses. This requires enabling NAT on the Tier-0 Gateway uplink interface and assigning an external IP pool for NAT translation. DNAT and firewall rules are not directly involved in this specific scenario for outbound internet access.
- A. Correct.
Correct: SNAT is required to translate the source IPs of private network traffic to a public IP address, enabling internet access.
- B. Correct.
Correct: NAT must be enabled on the uplink interface of the Tier-0 Gateway since it connects to the external network and performs the actual NAT operation.
- C. Incorrect.
Incorrect: DNAT is used for translating incoming traffic (e.g., from the internet to a specific internal server), which is not required in this case for outbound internet access.
- D. Correct.
Correct: An external IP address pool must be assigned to the Tier-0 Gateway for address translation during the SNAT operation.
- E. Incorrect.
Incorrect: While a firewall rule is important for allowing traffic, this step is not directly related to configuring NAT itself.