ExamGecko
Question list
Search
Search

List of questions

Search

Question 65 - JN0-637 discussion

Report
Export

A company has acquired a new branch office that has the same address space of one of its local networks, 192.168.100/24. The offices need to communicate with each other.

Which two NAT configurations will satisfy this requirement? (Choose two.)

A.

[edit security nat source] user@OfficeA# show rule-set OfficeBtoA { from zone OfficeB; to zone OfficeA; rule 1 { match { source-address 192.168.210.0/24; destination-address 192.168.200.0/24; } then { source-nat { interface; } } } }

Answers
A.

[edit security nat source] user@OfficeA# show rule-set OfficeBtoA { from zone OfficeB; to zone OfficeA; rule 1 { match { source-address 192.168.210.0/24; destination-address 192.168.200.0/24; } then { source-nat { interface; } } } }

B.

[edit security nat static] user@OfficeA# show rule-set From-Office-B { from interface ge-0/0/0.0; rule 1 { match { destination-address 192.168.200.0/24; } then { static-nat { prefix 192.168.100.0/24; } } } }

Answers
B.

[edit security nat static] user@OfficeA# show rule-set From-Office-B { from interface ge-0/0/0.0; rule 1 { match { destination-address 192.168.200.0/24; } then { static-nat { prefix 192.168.100.0/24; } } } }

C.

[edit security nat static] user@OfficeB# show rule-set From-Office-A { from interface ge-0/0/0.0; rule 1 { match { destination-address 192.168.210.0/24; } then { static-nat { prefix 192.168.100.0/24; } } } }

Answers
C.

[edit security nat static] user@OfficeB# show rule-set From-Office-A { from interface ge-0/0/0.0; rule 1 { match { destination-address 192.168.210.0/24; } then { static-nat { prefix 192.168.100.0/24; } } } }

D.

[edit security nat source] user@OfficeB# show rule-set OfficeAtoB { from zone OfficeA; to zone OfficeB; rule 1 { match { source-address 192.168.200.0/24; destination-address 192.168.210.0/24; } then { source-nat { interface; } } } }

Answers
D.

[edit security nat source] user@OfficeB# show rule-set OfficeAtoB { from zone OfficeA; to zone OfficeB; rule 1 { match { source-address 192.168.200.0/24; destination-address 192.168.210.0/24; } then { source-nat { interface; } } } }

Suggested answer: A, D

Explanation:

The problem describes two offices needing to communicate, but both share the same IP address space, 192.168.100.0/24. To resolve this, NAT must be configured to translate the conflicting address spaces on each side. Here's how each of the configurations works:

Option A (Correct):

This source NAT rule translates the source address of traffic from Office B to Office A. By configuring source NAT, the source IP addresses from Office B (192.168.210.0/24) will be translated when communicating with Office A (192.168.200.0/24). This method ensures that there is no overlap in address space when packets are transmitted between the two offices.

Option D (Correct):

This is a source NAT rule configured on Office B, which translates the source addresses from Office A to prevent address conflicts. It ensures that when traffic is initiated from Office A to Office B, the overlapping address range (192.168.100.0/24) is translated.

Options B and C (Incorrect):

These options involve static NAT rules that map address ranges between the two offices, but they do not resolve the overlapping IP address space issue effectively. Static NAT is not the optimal solution in this scenario since the problem involves address space conflict, which requires translation of source addresses during communication.

Juniper

Reference:

Juniper NAT Configuration Guide: Detailed instructions on how to configure source NAT and resolve address conflicts between networks.

asked 01/11/2024
Débora Gomes Almeida
45 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first