About the Author

author photo

Joe Harris, CCIE No. 6200 (R&S, Security & SP) is a Systems Engineer with Cisco Systems® specializing in Security. In addition to authoring Cisco Network Security Little Black Book, Joe has also been a technical reviewer for several Cisco Press publications and written articles, white papers, and presentations on various security technologies. He also assists various Certification Partners by beta testing their newest CCIE certification workbooks and has been recognized by Cisco as an SE Wall of Fame award winner.

See All Posts by This Author

Trivia Question - 9/19

September 19th, 2008 • Related • Filed Under

Ok today I’m going to ask one question consisting of 3 separate sub-section questions. All 3 of the questions must be answered correctly to count. Each of the 3 questions are True or False based.

1. The ‘netmask’ option at the end of the ‘global’ statement in an ASA’s config is only applicable for a ‘global’ NAT pool, and not ‘global’ PAT address? For instance:

global (outside) 1 192.1.1.1-192.1.1.254 netmask 255.255.255.0

2. When the netmask is specified, the ASA determines what the network and broadcast IPs are, for that network, and if they are included in the ‘global’ pool, it will use them. (For example, if the above ‘global’ line specified the range as 192.1.1.0-192.1.1.255, then the .0 or .255 address would also be used)?

3. If the netmask is ommitted in the ‘global’ statement, then the mask that is applied to the interface where the ‘nat’ statement is bound will be used. For instance in the following statement, the global pool will inherit the mask of 255.255.255.240.

nat (inside) 1 10.1.1.0 255.255.255.240

Please email me your answer to be entered into a monthly drawing for a free itunes or starbucks gift card.

Post a Response