Soru

Zorluk: OrtaNAT and PAT Implementation

An enterprise firewall is configured to handle traffic between an internal network (10.0.0.0/810.0.0.0/8) and the Internet. The administrator configures Port Address Translation (PAT / NAT Overload) using the firewall's public interface IP address (203.0.113.1203.0.113.1) for internal host outbound access. Simultaneously, a Static NAT rule is configured to map an internal web server (10.0.0.5010.0.0.50) to a dedicated public IP address (203.0.113.2203.0.113.2). Which of the following statements accurately describe how address translation operates in this environment? (Select TWO.)

  1. Outbound packets from internal workstations undergoing PAT have their source IP address translated to 203.0.113.1203.0.113.1 and their source Layer 4 port numbers dynamically mapped to track individual sessions.Cevap
  2. Inbound connections destined for 203.0.113.2203.0.113.2 undergo a 1-to-1 destination IP translation to 10.0.0.5010.0.0.50 without requiring Layer 4 port modification.Cevap
  3. C
    Multiple internal hosts sharing 203.0.113.1203.0.113.1 via PAT maintain their original internal source port numbers across all outbound connections without port translation.
  4. D
    Static NAT modifies Layer 4 TCP header sequence numbers and port fields to distinguish between internal hosts accessing the web server.

Cevap

Port Address Translation (PAT) dynamically translates both the private source IP address and Layer 4 source port numbers to track sessions for multiple hosts using a single public IP address. Static NAT performs a fixed 1-to-1 Layer 3 translation between a private IP address and a public IP address without altering transport-layer ports.
Port Address Translation (PAT) handles many-to-one outbound traffic by translating private source IP addresses to a single public IP address (203.0.113.1203.0.113.1) while dynamically allocating unique Layer 4 source ports to track connections. Static NAT provides a bi-directional 1-to-1 mapping between a private IP address (10.0.0.5010.0.0.50) and a public IP address (203.0.113.2203.0.113.2) strictly at Layer 3 without changing port numbers.

Adım Adım Çözüm

1
Analyze the operational mechanics of Port Address Translation (PAT / NAT Overload).
PAT allows many internal hosts to share one public IP address by tracking session state using unique TCP/UDP source ports assigned at the router/firewall.
Layer 4 port tracking is necessary to demultiplex returning traffic back to the correct internal private IP address.
2
Analyze the operational mechanics of Static NAT.
Static NAT creates a permanent one-to-one mapping between an inside local address (e.g., 10.0.0.5010.0.0.50) and an inside global address (e.g., 203.0.113.2203.0.113.2).
Static NAT operates entirely at Layer 3 and translates only the network header addresses, preserving the transport layer header.
3
Evaluate the option statements against Network NAT/PAT definitions.
The statement regarding outbound PAT host port mapping and the statement regarding 1-to-1 static destination translation are correct.
Distractors confuse Layer 3 IP translation with Layer 4 port translation roles.

Anahtar Kavram

NAT and PAT Implementation Differences
Bu soruyu puanla