Exam 350-401 topic 1 question 542 discussion

I am leaning towards BD. Here is the problem with C. The wording says outside. Technically the "209" address is considered inside global. So, in those terms it would not be outside. https://ipwithease.com/nat-understanding-local-global-inside-and-outside-addresses/

This is the Correct answers: BD A: is DEAD wrong *B: Because there is a 1:1 mapping so that 10.1.1.1 is translated to 209.169.201.1 to any destination. C: WRONG because the command was ip nat "inside",it's just that the initial traffic from the outside it's staticly set in the nat table but it's only "Natting" for inside addreses. to those outside local addresses are translated to internal ip. *D:is RIGHT since "initial traffic" on S0/0 needs to look at the destination "outside Local" E: WRONG R1 look at the destination for S0/0 for "initiating traffic" in order to match the outside local to inside local AND source when initial traffic is from the inside - So it's wrong in saying that it will look at destination for both.

I think C is also correct, but it says 'outside address,' although we have two public IP addresses, namely 209.165.201.1 and 209.165.201.2. It should be stated as "R1 is performing NAT for inside addresses, and outside addresses."

B & D are correct

B & C looks OK

A. Packets with a destination of 200.1.1.1 are translated to 10.1.1.1 or .2, respectively. No. Only packets sourced from 10.1.1.1 or 10.1.1.2 are translated B. A packet that is sent to 200 1.1.1 from 10.1.1.1 is translated to 209.165.201.1 on R1. Yes, this is a reesult or the static nat translation C. R1 is performing NAT for inside addresses and outside address. No outside nat is performed using the command 'ip nat outside' D. R1 looks at the destination IP address of packets entering S0/0 and destined for inside hosts. Yes. This is what routers do. they examine the destination ip address and make routing decisions. E. R1 processes packets entering E0/0 and S0/0 by examining the source IP address. No, routers look at the destination address when processing packets

R1 is only NATing the inside IPs to the outside.

Guys anybody can help, how come 200.1.1.1 came from ?????

I feel its B and C. With static one to one NAT, traffic can originate from either the internal or external side. There does not need to be a specific line for NAT one to one from the external to the internal. In the real world. you would have a firewall rules if necessary to block the inbound connection.

Who is 200.1.1.1 btw? i'll go with CD

given answer is correct. Static one-to-one NAT is bidirectional. D - is very vague when it mentions inside address, almost as if it's trying to say the original destination address it's looking at as traffic enters S0/0 interface is the internal address, which would be wrong.

In this case, NAT translates the inside local IP address to the inside global IP address. On the return traffic, the destination inside global IP address gets translated back to the inside local IP address. Based on the picture, there aren't any outside address translations involved in this scenario. (Even though, the traffic flows between the inside and outside interfaces of R1.) Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3548/sw/interfaces/b_N3548_Interfaces_Config_503_A1/b_N3548_Interfaces_Config_503_A1_chapter_0101.pdf Thus, I go with B,D (however, D describes a general function of the router).

BD is right.

The best answer must always be chosen- the router is not doing NAT for outside addresses as per translations table so C is incorrect. A and E are definitely incorrect. That leaves D which is a function performed by the router, so that is the best response for the question

B. A packet that is sent to 200 1.1.1 from 10.1.1.1 is translated to 209.165.201.1 on R1. C. R1 is performing NAT for inside addresses and outside address. both answers related to STATIC NAT ONE_TO_ONE, it works on both directions (inbound\outbound), and it does not matter from WHERE IP Packed has arrived (LAN or WAN) NAT will be performed in any way, just google and read it (nat one to one) >D. R1 looks at the destination IP address of packets entering S0/0 and destined for inside hosts. it can not be true because R1 itself is the last hop\destination in the trace (wan IP) i.e. arrived packets to this both NAT PUBLIC IP will be translated to RFC1918 and vice versa. Enjoi! ))

there is no outside entry in translations table

BD is correct