Refer to the exhibit. What are two results of the NAT configuration? (Choose two.)
Refer to the exhibit. What are two results of the NAT configuration? (Choose two.)
Based on the NAT configuration shown in the exhibit, two outcomes are clear. First, a static NAT translation is set up, meaning that a packet sent from 10.1.1.1 will be translated to 209.165.201.1, and traffic in the opposite direction will be translated back, hence one-to-one mapping (B). Second, R1 examines the destination IP address of packets entering the Serial 0/0 interface to perform address translation correctly, which is typical behavior in such configurations to determine the appropriate internal host (D). The other options either misinterpret the translation direction or mischaracterize the role of R1 in this configuration context.
I am leaning towards BD. Here is the problem with C. The wording says outside. Technically the "209" address is considered inside global. So, in those terms it would not be outside. https://ipwithease.com/nat-understanding-local-global-inside-and-outside-addresses/
This is the Correct answers: BD A: is DEAD wrong *B: Because there is a 1:1 mapping so that 10.1.1.1 is translated to 209.169.201.1 to any destination. C: WRONG because the command was ip nat "inside",it's just that the initial traffic from the outside it's staticly set in the nat table but it's only "Natting" for inside addreses. to those outside local addresses are translated to internal ip. *D:is RIGHT since "initial traffic" on S0/0 needs to look at the destination "outside Local" E: WRONG R1 look at the destination for S0/0 for "initiating traffic" in order to match the outside local to inside local AND source when initial traffic is from the inside - So it's wrong in saying that it will look at destination for both.
More on C: to do natting for the outside the command would be "ip nat outside"
A. Packets with a destination of 200.1.1.1 are translated to 10.1.1.1 or .2, respectively. No. Only packets sourced from 10.1.1.1 or 10.1.1.2 are translated B. A packet that is sent to 200 1.1.1 from 10.1.1.1 is translated to 209.165.201.1 on R1. Yes, this is a reesult or the static nat translation C. R1 is performing NAT for inside addresses and outside address. No outside nat is performed using the command 'ip nat outside' D. R1 looks at the destination IP address of packets entering S0/0 and destined for inside hosts. Yes. This is what routers do. they examine the destination ip address and make routing decisions. E. R1 processes packets entering E0/0 and S0/0 by examining the source IP address. No, routers look at the destination address when processing packets
given answer is correct. Static one-to-one NAT is bidirectional. D - is very vague when it mentions inside address, almost as if it's trying to say the original destination address it's looking at as traffic enters S0/0 interface is the internal address, which would be wrong.
In this case, NAT translates the inside local IP address to the inside global IP address. On the return traffic, the destination inside global IP address gets translated back to the inside local IP address. Based on the picture, there aren't any outside address translations involved in this scenario. (Even though, the traffic flows between the inside and outside interfaces of R1.) Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3548/sw/interfaces/b_N3548_Interfaces_Config_503_A1/b_N3548_Interfaces_Config_503_A1_chapter_0101.pdf Thus, I go with B,D (however, D describes a general function of the router).
BD is right.
correct answer is B, D C=wrong because it describe PAT adress translation "many to one" reference: https://www.netsetup.it/cisco/78-configurazione-nat-router-cisco
R1 is only NATing the inside IPs to the outside.
Who is 200.1.1.1 btw? i'll go with CD
I mgiuseppe86 0 minutes ago Awaiting moderator approval f you have to ask this question, you should be studying for CCNA or Network+ or go learn how the internet works first before you shame us all and get your CCNP working jobs you dont deserve. Anyone who is at this level understands when questions like this come up, we are expected to analyze everything and realize the concepts. We are NATing addresses to connect to the internet, presumably,, so its asking us how packets are sent to a public IP (200.1.1.1 in this example). We are expected to understand that once we NAT to our ISP IP (209.167.201.30/27) that we can theoretically route to any other public IP Space thereonafter (hence the WAN Cloud). Cisco does create ridiculous questions usually but this is a pretty decent one.
there is no outside entry in translations table
BD is correct
B & D are correct
B & C looks OK
B & D ****
Guys anybody can help, how come 200.1.1.1 came from ?????
If client 10.1.1.1 or 10.1.1.2 on the inside network are reaching out to a server on the outside with any global IP address, then they will be translated. Let's pretend 200.1.1.1 is a youtube server. Then client 10.1.1.1 will be translated to 209.169.201.1, in order to reach out to it.
f you have to ask this question, you should be studying for CCNA or Network+ or go learn how the internet works first before you shame us all and get your CCNP working jobs you dont deserve. Anyone who is at this level understands when questions like this come up, we are expected to analyze everything and realize the concepts. We are NATing addresses to connect to the internet, presumably,, so its asking us how packets are sent to a public IP (200.1.1.1 in this example). We are expected to understand that once we NAT to our ISP IP (209.167.201.30/27) that we can theoretically route to any other public IP Space thereonafter (hence the WAN Cloud). Cisco does create ridiculous questions usually but this is a pretty decent one.
you think you are the smart one huh? Try to be helpful without being condescending. don't be an ahole
I nearly forgot we are on an exam cheat website...
we get it, you're not fun to work with
I feel its B and C. With static one to one NAT, traffic can originate from either the internal or external side. There does not need to be a specific line for NAT one to one from the external to the internal. In the real world. you would have a firewall rules if necessary to block the inbound connection.
The best answer must always be chosen- the router is not doing NAT for outside addresses as per translations table so C is incorrect. A and E are definitely incorrect. That leaves D which is a function performed by the router, so that is the best response for the question
B. A packet that is sent to 200 1.1.1 from 10.1.1.1 is translated to 209.165.201.1 on R1. C. R1 is performing NAT for inside addresses and outside address. both answers related to STATIC NAT ONE_TO_ONE, it works on both directions (inbound\outbound), and it does not matter from WHERE IP Packed has arrived (LAN or WAN) NAT will be performed in any way, just google and read it (nat one to one) >D. R1 looks at the destination IP address of packets entering S0/0 and destined for inside hosts. it can not be true because R1 itself is the last hop\destination in the trace (wan IP) i.e. arrived packets to this both NAT PUBLIC IP will be translated to RFC1918 and vice versa. Enjoi! ))