Which of these is the appropriate configuration on the Cisco ASA adaptive security appliance if the VPNclient’s public IP address is 209.165.201.10 and it is assigned a private address from 192.168.1.0/24?

350-018-ccie-security-written-exam-v4-0_img_092

Client1 has an IPsec VPN tunnel established to a Cisco ASA adaptive security appliance in Chicago. The remote access VPN client wants to accesswww.cisco.com, but split tunneling is disabled. Which of these is the appropriate configuration on the Cisco ASA adaptive security appliance if the VPNclient’s public IP address is 209.165.201.10 and it is assigned a private address from 192.168.1.0/24?
A. same-security-traffic permit intra-interface
ip local pool ippool 192.168.1.1-192.168.1.254
global (outside) 1 209.165.200.230
nat (inside) 1 192.168.1.0 255.255.255.0
B. same-security-traffic permit intra-interface
ip local pool ippool 192.168.1.1-192.168.1.254
global (outside) 1 209.165.200.230
nat (outside) 1 192.168.1.0 255.255.255.0
C. same-security-traffic permit intra-interface
ip local pool ippool 192.168.1.1-192.168.1.254
global (inside) 1 209.165.200.230
nat (inside) 1 192.168.1.0 255.255.255.0
D. same-security-traffic permit intra-interface
ip local pool ippool 192.168.1.1-192.168.1.254
global (outside) 1 209.165.200.230
nat (outside) 1 209.165.201.10 255.255.255.255
E. same-security-traffic permit intra-interface
ip local pool ippool 192.168.1.1-192.168.1.254
global (outside) 1 209.165.200.230
nat (inside) 1 209.165.201.10 255.255.255.255
F. same-security-traffic permit intra-interface
ip local pool ippool 192.168.1.1-192.168.1.254
global (inside) 1 209.165.200.230
nat (inside) 1 209.165.201.10 255.255.255.255

cisco-exams

Leave a Reply

Your email address will not be published. Required fields are marked *


The reCAPTCHA verification period has expired. Please reload the page.