JN0-664 Exam QuestionsBrowse all questions from this exam

JN0-664 Exam - Question 24


Click the Exhibit button.

Referring to the exhibit, CE-1 is providing NAT services for the hosts at Site 1 and you must provide Internet access for those hosts.

Which two statements are correct in this scenario? (Choose two.)

Show Answer
Correct Answer: AC

To provide Internet access for the hosts at Site 1, you need to configure a static route in the main routing instance for the public IP address of CE-1 (203.0.113.1/32) with the VPN-A.inet.0 table as the next hop. This is because the NAT is being done by CE-1, and traffic must be routed to the NATed public IP, not the private IP range. Additionally, to ensure traffic from Site 1 can reach the Internet, a RIB group must be configured on PE-1 to leak a default route from the inet.0 table to the VPN-A.inet.0 table, so the VPN can know how to route the Internet-bound traffic.

Discussion

4 comments
Sign in to comment
a65ecbcOptions: AC
Dec 10, 2023

It says the CE is doing the NAT.

Bob_SmithOptions: AC
Jan 20, 2024

Selected Answer: AC We want a static route to the public IP. The private IP is hidden behind the NATed public IP, so a static route to the private range is useless to us.

StargateCommandOptions: AC
Jan 25, 2024

Selected Answer: AC

zineeddineOptions: AC
Mar 3, 2024

because of NAT