A network technician has used the access-list 1 permit 172.16.0.0 0.0.0.255 command to configure NAT on an edge router to translate only four networks, 172.16.0.0 /24, 172.16.1.0 /24, 172.16.2.0 /24, and 172.16.3.0 /24. After receiving complaints about limited access to the Internet, issuing the show ip nat translations command reveals that some networks are missing from the output. Which change will resolve the problem?
- The access list should be replaced with access-list 1 permit 172.16.0.0 0.0.1.255 .
- The access list should be replaced with access-list 1 permit 172.16.0.0 0.0.3.255
- The access list should be replaced with access-list 1 permit 172.16.0.0 0.0.0.255
- The access list should be replaced with access-list 1 permit 172.16.0.0 255.255.255.0.
Explanation: The ACL in the original configuration will only permit the first subnet, 172.16.0.0, to be translated. The first option uses a subnet mask when it should use a wildcard mask. The second option will only permit the first two networks, 172.16.0.0 and 172.16.1.0. The third option uses an invalid wildcard mask that will allow translation of the entire 172.16.0.0 network. The fourth option is the correct option as it allows translation of just the four subnets.
Exam with this question: Practice Final - ENSA
Please login or Register to submit your answer