A network administrator is configuring Network Address Translation (NAT) and Port Address Translation (PAT) on an edge router for an organization. The private internal network uses the address space. The requirements state that hundreds of internal workstations must share a single registered public IPv4 address for outbound internet access, and external users must be able to securely access an internal HTTPS web server () using that same public IP address. Which of the following implementation steps or mechanisms must be configured on the router to fulfill these requirements? (Select TWO.)
- Enable Port Address Translation (PAT / NAT Overload) to map multiple internal private IP addresses to the single public IP address using unique source port numbers.Answer
- BConfigure a 1:1 Static NAT rule for all outbound client workstations to share the single public IP address without port mapping.
- Configure a static port forwarding (destination PAT) rule mapping inbound traffic aimed at public TCP port 443 to the internal IP address 10.0.0.50 on port 443.Answer
- DConfigure Dynamic NAT with an ICMP pool mapping to translate inbound HTTPS server traffic across OSI Layer 3.
Answer
Port Address Translation (PAT / NAT Overload) must be configured for outbound host traffic using unique source port numbers, and a static port forwarding rule mapping public TCP port 443 to internal IP address 10.0.0.50:443 must be configured for inbound web traffic.
To satisfy both requirements using a single public IP address, the network administrator must implement PAT (NAT Overload) for outbound traffic, which uses unique source port numbers to track connections for multiple internal hosts. In addition, static port forwarding (destination PAT) must be configured to translate incoming requests targeting public TCP port 443 directly to the web server's internal address of 10.0.0.50 on port 443.
Step-by-Step Solution
Key Concept
NAT Overload (PAT) and Static Port Forwarding Implementation