VCP-VCF Administrator 2024 Question 235
Single answerYou are tasked with configuring Network Address Translation (NAT) in VMware NSX to allow external users to access an internal web server with a private IP address (10.1.1.10). The external IP address assigned to the organization is 203.0.113.50. Which type of NAT rule should you configure to fulfill this requirement?
- A
Source NAT (SNAT) with the external IP address 203.0.113.50
- B
Destination NAT (DNAT) with the external IP address 203.0.113.50
- C
One-to-One NAT with a pool of external IP addresses
- D
Reflexive NAT to enable bidirectional communication
Show answer and explanation
Correct answer: B
Explanation
To allow external users to access an internal web server with a private IP address, you must configure a Destination NAT (DNAT) rule. DNAT translates the external IP address (203.0.113.50) to the internal server's private IP address (10.1.1.10) for inbound traffic. This ensures that requests to the public IP are forwarded to the internal web server.
- A. Incorrect.
Source NAT (SNAT) is used to translate internal private IP addresses to a public IP address for outbound traffic. It is not used for inbound traffic to internal resources.
- B. Correct.
Destination NAT (DNAT) is used to translate an external IP address (203.0.113.50) to an internal IP address (10.1.1.10) to allow access to the internal web server. This is the correct option for this scenario.
- C. Incorrect.
One-to-One NAT is used for mapping a single internal IP address to a single external IP address, often for outbound and inbound traffic. However, this scenario specifically involves inbound traffic to a single destination using DNAT.
- D. Incorrect.
Reflexive NAT is used in certain scenarios to enable bidirectional communication but is not relevant for the specific requirement of mapping an external IP to an internal server.