Examkin

Question

Difficulty: MediumNAT and PAT Implementation

An organization hosts an internal web server at private IP address 192.168.1.50192.168.1.50 that must be accessible to external clients on the internet using the public IP address 203.0.113.10203.0.113.10. Inbound requests from the internet to destination port 8080 must consistently map to this internal server. Which network address translation technique should the network administrator implement on the edge firewall?

  1. Static Network Address Translation (Static NAT)Answer
  2. B
    Port Address Translation (PAT / NAT Overload)
  3. C
    Dynamic Network Address Translation (Dynamic NAT)
  4. D
    Layer 2 MAC Address Translation

Answer

Static Network Address Translation (Static NAT) should be configured on the edge firewall.
Static NAT establishes a persistent, 1-to-1 mapping between a specific internal private IP address and an external public IP address. This enables external internet clients to consistently locate and initiate inbound traffic to an internal web server.

Step-by-Step Solution

1
Identify the traffic pattern and connectivity requirements
An internal host with a private IP address needs to accept unsolicited inbound requests originating from external clients on the internet via a fixed public IP address.
Public servers located behind a firewall require a persistent, predictable mapping between their private IP address and a public IP address.
2
Evaluate candidate NAT implementation methods
Static NAT provides a persistent 1-to-1 bidirectional mapping between a single private IP address and a single public IP address.
Dynamic NAT allocates public IP addresses temporarily from a pool, and PAT multiplexes outbound traffic using Layer 4 ports; neither guarantees a static inbound translation for external connections.

Key Concept

Static NAT Implementation for Inbound Services
Rate this question

Topics

NAT and PAT Implementation

More questions from this topic