TSHOOT 642-832 Trouble Ticket 4 – NAT ACL

By | March 13, 2011

Following ticket consists of a problem description and existing configuration on the device.

Trouble Ticket Statement:

Click See Topology

Client 1 and Client 2 are no able to reach the Web Server at 209.65.200.241. Initial troubleshooting shows that DSW1, DSW2 and all other routes are able to reach the Web Server.

 Configuration on R1:

ip nat inside source list ant_pool interface Serial0/0/0/1 overload
!
ip access-list standard nat_pool
permit 10.1.0.0
!
interface Serial0/0/0/1
ip address 209.65.200.224 255.255.255.252
ip nat outside
!
interface Serial0/0/0/0.12
ip address 10.1.1.1 255.255.255.252
ip nat inside
ip ospf message-digest-key 1 md5 TSHOOT
ip ospf authentication message-digest

Question 1:
What is the solution of the fault condition?
A.Add permit 10.2.0.0 statement in nat_pool access-list
B.Remove permit 10.1.0.0 statement from nat_pool access-list
C.Change ip nat inside source list nat_pool interface Serial0/0/0/1 overload to ip nat inside source list nat_pool interface Serial0/0/0/0.12 overload
D.Change ip nat outside statement under Serial0/0/0/1 configuration to ip nat inside
Correct Answer: A

Question 2:
The Fault Condition is related to which technology?
A.EIGRP
B.HSRP
C.BGP
D.NAT
Correct Answer: D

Question 3:
On which device is the fault condition located?
A.R1
B.DSW1
C.R4
D.R2
Correct Answer: A