You enter the following command
set int e8 dip 5 shift-from 10.1.1.5 1.1.10.2 1.1.10.40 What will be the source IP address of the egress packet for the second user requesting an address from the DIP pool, if the source address of that user is 10.1.1.7?
A.
1.1.10.2
B.
1.1.10.3
C.
1.1.10.4
D.
1.1.10.40
Explanation:
You can define a one-to-one mapping from an original source IP address to a translated source IP address for a
range of IP addresses. Such a mapping ensures that the NetScreen device always translates a particular source IP address from within that range to the same translated address within a DIP pool. There can be any number of addresses in the range. You can even map one subnet to another subnet, with a consistent one-to-one mapping of each original address in one subnet to its translated counterpart in the other subnet.
In this question, you define DIP pool 5 on ethernet8, an interface bound to the Untrust zone. You want to translate addresses from 10.1.1.5 to addresses between 1.1.10.2 and 1.1.10.40, and you want the relationship between each original and translated address to be consistent.
Now the first IP 10.1.1.5 will be translated to 1.1.10.2. The second IP 10.1.1.6 will be translated to 1.1.10.3.
And the third IP 10.1.1.7 wil be translated to 1.1.10.4.