ExamGecko
Search Search Login
Home Home / Juniper / JN0-637
Question list
Search
Search

List of questions

Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which two statements are true regarding NAT64? (Choose two.)
You are deploying IPsec VPNs to securely connect several enterprise sites with ospf for dynamic routing. Some of these sites are secured by third-party devices not running Junos. Which two statements are true for this deployment? (Choose two.)
You are attempting to ping an interface on your SRX Series device, but the ping is unsuccessful. What are three reasons for this behavior? (Choose three.)
Click the Exhibit button. Referring to the exhibit, which two statements are correct? (Choose two.)
Exhibit: Referring to the flow logs exhibit, which two statements are correct? (Choose two.)
Exhibit: Which two statements are correct about the output shown in the exhibit. (Choose Two)
Which two statements are true regarding NAT64? (Choose two.)
You want to bypass IDP for traffic destined to social media sites using APBR, but it is not working and IDP is dropping the session. What are two reasons for this problem? (Choose two.)
Click the Exhibit button. You have configured a CoS-based VPN that is not functioning correctly. Referring to the exhibit, which action will solve the problem?
A company has acquired a new branch office that has the same address space as one of its local networks, 192.168.100.0/24. The offices need to communicate with each other. Which two NAT configurations will satisfy this requirement? (Choose two.)

Question 40 - JN0-637 discussion

Report
Export

You have deployed an SRX Series device at your network edge to secure Internet-bound sessions for your local hosts using source NAT. You want to ensure that your users are able to interact with applications on the Internet that require more than one TCP session for the same application session.

Which two features would satisfy this requirement? (Choose two.)

A.

address persistence

Answers
A.

address persistence

B.

STUN

Answers
B.

STUN

C.

persistent NAT

Answers
C.

persistent NAT

D.

double NAT

Answers
D.

double NAT

Suggested answer: A, C

Explanation:

Address persistence ensures that the same NAT IP address is used for all sessions originating from a single source IP. Persistent NAT maintains connections for applications needing multiple sessions, like VoIP. Additional details are available in Juniper NAT Documentation.

For applications that require multiple TCP sessions for the same application session (such as VoIP or certain online games), the SRX device needs to handle NAT properly to maintain session continuity. Here's what helps:

Address Persistence (Answer A): Address persistence ensures that multiple sessions initiated by the same internal host are mapped to the same external IP address. This is crucial for applications that use multiple TCP sessions to maintain a stateful connection with the external server.

Command Example:

bash

set security nat source persistent-nat address-persistence

Persistent NAT (Answer C): This feature allows the external server to initiate new connections to the internal client using the same NAT translation. It's essential for applications that require consistent NAT mappings across multiple sessions.

Command Example:

bash

set security nat source persistent-nat permit target-host-port

These features ensure that applications with multiple TCP sessions work seamlessly across NAT.

Show Answer
asked 01/11/2024
Robinson Santos
38 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms