An engineer is configuring the branch office with a 172.16.0.0/16 subnet to use DIA for Internet traffic. All other traffic must flow to the central site or branches using the MPLS circuit. Which configuration meets the requirement?
An engineer is configuring the branch office with a 172.16.0.0/16 subnet to use DIA for Internet traffic. All other traffic must flow to the central site or branches using the MPLS circuit. Which configuration meets the requirement?
The correct configuration to meet the requirement is B. This configuration matches the source IP and destination IP as 172.16.0.0/16 in sequence 1 and accepts the action, ensuring traffic within the 172.16.0.0/16 subnet is handled appropriately. Sequence 2 matches the source-data-prefix-list DIA and applies NAT using VPN 0, which is necessary for directing internet traffic through Direct Internet Access (DIA). This ensures only the specified internet traffic will use NAT to the internet, while all other traffic will flow to the central site or branches using the MPLS circuit.
B is correct. Answer D is wrong because all the packets will match the sequence 1, so never a packet will check the sequence 2 to use NAT to the internet.
why all the packets will match sequence 1? I think only match packets with origin 172.16.x.x. answer D is correct for me.
I think D is correct, matching the same source and destination seems wrong to me,
B is correct.
Correct B
im going with B
B for sure
B & C seem absolutely identical?
C is missing "action accept" after matching source and dest ip so correct should be B
B sure