F5 Application Delivery Fundamentals — Question 9
Which VLANs must be enabled for a SNAT to perform as desired (translating only desired packets)?
Answer options
- A. The SNAT must be enabled for all VLANs.
- B. The SNAT must be enabled for the VLANs where desired packets leave the BIG-IP.
- C. The SNAT must be enabled for the VLANs where desired packets arrive on the BIG-IP.
- D. The SNAT must be enabled for the VLANs where desired packets arrive and leave the BIG-IP.
Correct answer: C
Explanation
The correct answer is C because SNAT needs to be enabled on the VLANs where the desired packets enter the BIG-IP to ensure proper translation. Options A and D are incorrect as they imply broader VLAN coverage than necessary, while option B focuses only on outgoing packets, neglecting incoming ones.