You have configured automatic static NAT on an internal host-node object. You clear the box Translate destination on client site from global properties Nat. assuming all other settings on all properties are selected, what else must be configured so that a host on internet can initiate an inbound connection to this host.
A.
A static route to ensure packets destined for the public NAT IP address will reach the Gateway’s internal interface.
B.
A proxy ARP entry, to ensure packets destined for the public IP address will reach the Security Gateway’s external interface.
C.
The NAT IP address must be added to the anti-spoofing group of the external gateway interface
D.
No extra configuration is needed
The answer should be “A” because “You clear the box Translate destination on client site”.
“B” canot be because none ARP configuration necessary for automatic static NAT.
0
0