Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

F5 Networks F5CAB3 Exam - Topic 1 Question 11 Discussion

A BIG-IP Administrator creates a new Virtual Server. The end user is unable to access the page. During troubleshooting, the administrator learns that the connection between the BIG-IP system and server is NOT set up correctly. What should the administrator do to solve this issue? (Choose one answer)
D) Set Address Translation to SNAT and have a self-IP configured in the same subnet as the servers
A) Disable Address Translation
B) Set Address Translation to Auto Map, configure a SNAT pool, and have pool members in the same subnet as the servers
C) Set Address Translation to SNAT and configure a specific translation address

F5 Networks F5CAB3 Exam - Topic 1 Question 11 Discussion

Actual exam question for F5 Networks's F5CAB3 exam
Question #: 11
Topic #: 1
[All F5CAB3 Questions]

A BIG-IP Administrator creates a new Virtual Server. The end user is unable to access the page. During troubleshooting, the administrator learns that the connection between the BIG-IP system and server is NOT set up correctly. What should the administrator do to solve this issue? (Choose one answer)

Show Suggested Answer Hide Answer
Suggested Answer: D

The issue described is a classic symptom of asymmetric routing, which frequently occurs when the BIG-IP system and the back-end servers reside on the same subnet (often referred to as a 'one-arm' deployment).

The Routing Problem: By default, the BIG-IP system preserves the original client source IP address when forwarding traffic to a pool member. If the server is in the same subnet as the client or if the server's default gateway is not the BIG-IP, the server will attempt to send its response directly back to the client's IP address, bypassing the BIG-IP.

Stateful Failure: Since the BIG-IP is a Full Proxy, it maintains a state table. Because the response packet never returns through the BIG-IP, the system cannot complete the three-way handshake or manage the application session, resulting in a connection failure for the user.

The Solution (SNAT): Enabling Source Network Address Translation (SNAT) solves this by changing the source IP address of the request to an IP address owned by the BIG-IP (typically a self-IP).

Requirement for Subnet Alignment: To ensure the server sends the response back to the BIG-IP, the translation address must be reachable. By using a self-IP configured in the same subnet as the servers, the BIG-IP ensures that the server sees the request coming from a local 'neighbor.' The server will then naturally send the response back to that self-IP, allowing the BIG-IP to translate the packet back and forward it to the client.

Why other options are incorrect:

A: Disabling address translation would ensure the server-side traffic uses the client IP, making asymmetric routing inevitable in this scenario.

B: This is technically contradictory; 'Auto Map' specifically uses existing self-IPs and does not require or use a 'SNAT pool' configuration.

C: While using a specific translation address can work, it does not inherently guarantee the Layer 2/Layer 3 reachability mentioned in the scenario as effectively as ensuring the self-IP is correctly placed in the server's subnet.


Contribute your Thoughts:

0/2000 characters
Leonard
1 day ago
B seems safer. Auto Map is reliable for dynamic environments.
upvoted 0 times
...
Stephaine
6 days ago
I'm leaning towards C. A specific translation address might simplify things.
upvoted 0 times
...
Johna
11 days ago
I agree, but option D could work too. Self-IP is crucial.
upvoted 0 times
...
Beckie
17 days ago
I think option B is the best choice. It ensures proper routing.
upvoted 0 times
...
Samira
22 days ago
D could be a solution, but B seems more reliable.
upvoted 0 times
...
Wayne
27 days ago
Wait, can you really just disable address translation? Sounds risky!
upvoted 0 times
...
Bernadine
1 month ago
Agree with B, it's the best option here.
upvoted 0 times
...
Gearldine
1 month ago
I think C might work too, but not sure.
upvoted 0 times
...
Ernest
1 month ago
B is the way to go, definitely!
upvoted 0 times
...
Tonja
2 months ago
I practiced a similar question where SNAT was involved, and I think configuring a specific translation address could be the right move here.
upvoted 0 times
...
Hayley
2 months ago
I feel like option D makes sense since having a self-IP in the same subnet should help with routing, but I’m not entirely confident.
upvoted 0 times
...
Louann
2 months ago
I think setting Address Translation to Auto Map could work, but I feel like it might not be the best option for all scenarios.
upvoted 0 times
...
Clorinda
2 months ago
I remember something about SNAT configurations from our practice questions, but I'm not sure if it's always necessary.
upvoted 0 times
...

Save Cancel