QuestionQ12

Network Virtualization

You need to create a Contrail service instance between two virtual networks. The left virtual network is private. Routes from the left virtual network VRF must not be leaked into the right virtual network VRF.

Which Contrail service-instance type should you select for this scenario?

  • A In-network private
  • B In-network NAT
  • C In-Network
  • D Transparent
Explanation

An in-network NAT service instance is intended for a private left virtual network and applies source NAT as traffic is routed toward the right network. Because the source address is translated, the private left VRF routes are not exposed to the right VRF as routed private-network prefixes. Juniper documents that in-network-NAT updates the source address between the service instance’s left and right interfaces.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!