JN0-231: Security, AssociateDemo

Question

Your ISP assigns you an IP address of 203.0.113.0/27 and tells you that the default gateway is 203.0.113.1. You configure destination NAT to an internal server, but requests sent to the webserver at 203.0.113.5 are not reaching the server.

In this scenario, which two configuration features need to be added?

Choose two

A firewall filter
B security policy
C proxy-ARP
D UTM policy

Explanation

For destination NAT using an additional public address in the same subnet as the ingress interface, proxy ARP makes the SRX respond to ARP requests for that address. A security policy must also permit traffic from the external zone to the translated internal destination. Juniper's destination-NAT configuration examples explicitly require both proxy ARP and a security policy.

Learn more

Destination NAT | Junos OS | Juniper Networks

JN0-231: Security, AssociateDemo

AstroTutor

Notes

Readiness

QuestionQ38

Community Discussion