You are asked to provide access for an external VoIP server to VoIP phones in your network using
private addresses. However, due to security concerns, the VoIP server should only be able to
initiate connections to each phone once the phone has logged into the VoIP server. The VoIP
server requires access to the phones using multiple ports.
Which type of persistent NAT is required?
A.
any-remote-host
B.
target-host
C.
target-host-port
D.
remote-host
Explanation:
Reference :http://www.juniper.net/techpubs/software/junos-security/junos-security96/junossecurity-swconfig-security/understand-persistent-nat-section.html
C
0
0
Fuck you
0
0
http://www.blackhole-networks.com/SRXNAT/snat_persist.html
0
0
– once the phone (internal) has logged into the VoIP server (external) , the VoIP server (external) should only be able to initiate connections to each phone (internal).
The VoIP server (external) requires access to the phones (internal) using multiple ports.
◾Target host:
All requests from a specific internal IP address and port (phone) are mapped to the same external (VoIP server) IP address and port.
An external host (VoIP server) can send a packet to an internal host (VoIP Phone) only if the internal host (VoIP phone) had previously sent a packet to the external host’s IP address (VoIP server).
http://www.juniper.net/techpubs/software/junos-security/junos-security96/junos-security-swconfig-security/understand-persistent-nat-section.html
So correct Answers is B
0
0