Which type of address translation should be used when a…

Which type of address translation should be used when a Cisco ASA is in transparent mode?

Which type of address translation should be used when a Cisco ASA is in transparent mode?

A.
Static NAT

B.
Dynamic NAT

C.
Overload

D.
Dynamic PAT

Explanation:
BD

+ Because the transparent firewall does not have any interface IP addresses, you cannot use interface PAT.
Source: http://www.cisco.com/c/en/us/td/docs/security/asa/asa80/configuration/guide/conf_gd/
cfgnat.html#wp1102744%0A

Show Hint

Leave a Reply 2

Your email address will not be published. Required fields are marked *

3 + 20 =

Oleg

Oleg

Could anyone please explain, according to picture provided, why not dynamic also?
Is “static” just a “best” answer?

Reply

Glenn

Glenn

With Cisco “static” has a lower administration cost then “dynamic”, therefore static is more trusted.

Directly connected interface 0
Static route out an interface 1
Static route to next-hop address 1
DMNR – Dynamic Mobile Network Routing 3
EIGRP summary route 5
External BGP 20
Internal EIGRP 90
IGRP 100
OSPF 110
IS-IS 115
Routing Information Protocol (RIP) 120
Exterior Gateway Protocol (EGP) 140
On Demand Routing (ODR) 160
External EIGRP 170
Internal BGP 200
Next Hop Resolution Protocol (NHRP) 250
Floating Static Route (ex. backup default route) Variable–user assigned
Unknown (Others) 255

Reply