You are a network administrator that is deploying a Cisco router that needs to support both PAT
and site-to-site VPN on one public IP address. In order to make both work simultaneously, how
should the NAT configuration be set up?
A.
The VPN configuration should be set up with a static NAT configuration.
B.
Because PAT does support AH, the VPN tunnel must not be configured with Encapsulating
Security Payload (ESP).
C.
An ACL should be attached to the nat command to permit the NAT traffic and deny the VPN
traffic.
D.
The nat configuration command needs to include a range of IP addresses with the overload
word on the end.
E.
A route-map should be used with the nat command to support the use of AH and ESP.
F.
The ip nat inside command needs to exclude the VPN source address in the NAT pool.