QuestionQ12

Layer 3 VPNs

Click the Exhibit button.

Question Image

With reference to the exhibit, CE-1 provides NAT services for the hosts at Site 1, and Internet access must be provided for those hosts.

Which two statements are correct for this scenario?

Choose two
Explanation

Because Site 1 traffic is source-NATed to public address 203.0.113.1, return traffic from the Internet must have a route in inet.0 for 203.0.113.1/32 that forwards lookup to VPN-A.inet.0. The VPN routing table also needs an Internet default route, which is provided by leaking the default route from inet.0 into VPN-A.inet.0. The 10.1.2.0/24 private subnet is not the address used for Internet return traffic after NAT.

Community Discussion

No comments yet. Be the first to start the discussion!