Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

F5 Networks F5CAB3 Exam - Topic 1 Question 11 Discussion

A BIG-IP Administrator creates a new Virtual Server. The end user is unable to access the page. During troubleshooting, the administrator learns that the connection between the BIG-IP system and server is NOT set up correctly. What should the administrator do to solve this issue? (Choose one answer)
D) Set Address Translation to SNAT and have a self-IP configured in the same subnet as the servers
A) Disable Address Translation
B) Set Address Translation to Auto Map, configure a SNAT pool, and have pool members in the same subnet as the servers
C) Set Address Translation to SNAT and configure a specific translation address

F5 Networks F5CAB3 Exam - Topic 1 Question 11 Discussion

Actual exam question for F5 Networks's F5CAB3 exam
Question #: 11
Topic #: 1
[All F5CAB3 Questions]

A BIG-IP Administrator creates a new Virtual Server. The end user is unable to access the page. During troubleshooting, the administrator learns that the connection between the BIG-IP system and server is NOT set up correctly. What should the administrator do to solve this issue? (Choose one answer)

Show Suggested Answer Hide Answer
Suggested Answer: D

The issue described is a classic symptom of asymmetric routing, which frequently occurs when the BIG-IP system and the back-end servers reside on the same subnet (often referred to as a 'one-arm' deployment).

The Routing Problem: By default, the BIG-IP system preserves the original client source IP address when forwarding traffic to a pool member. If the server is in the same subnet as the client or if the server's default gateway is not the BIG-IP, the server will attempt to send its response directly back to the client's IP address, bypassing the BIG-IP.

Stateful Failure: Since the BIG-IP is a Full Proxy, it maintains a state table. Because the response packet never returns through the BIG-IP, the system cannot complete the three-way handshake or manage the application session, resulting in a connection failure for the user.

The Solution (SNAT): Enabling Source Network Address Translation (SNAT) solves this by changing the source IP address of the request to an IP address owned by the BIG-IP (typically a self-IP).

Requirement for Subnet Alignment: To ensure the server sends the response back to the BIG-IP, the translation address must be reachable. By using a self-IP configured in the same subnet as the servers, the BIG-IP ensures that the server sees the request coming from a local 'neighbor.' The server will then naturally send the response back to that self-IP, allowing the BIG-IP to translate the packet back and forward it to the client.

Why other options are incorrect:

A: Disabling address translation would ensure the server-side traffic uses the client IP, making asymmetric routing inevitable in this scenario.

B: This is technically contradictory; 'Auto Map' specifically uses existing self-IPs and does not require or use a 'SNAT pool' configuration.

C: While using a specific translation address can work, it does not inherently guarantee the Layer 2/Layer 3 reachability mentioned in the scenario as effectively as ensuring the self-IP is correctly placed in the server's subnet.


Contribute your Thoughts:

0/2000 characters
I practiced a similar question where SNAT was involved, and I think configuring a specific translation address could be the right move here.
upvoted 0 times
...
Hayley
5 days ago
I feel like option D makes sense since having a self-IP in the same subnet should help with routing, but I’m not entirely confident.
upvoted 0 times
...
Louann
10 days ago
I think setting Address Translation to Auto Map could work, but I feel like it might not be the best option for all scenarios.
upvoted 0 times
...
Clorinda
15 days ago
I remember something about SNAT configurations from our practice questions, but I'm not sure if it's always necessary.
upvoted 0 times
...

Save Cancel