Given branches sharing location ID A042:B49C:D02E::72 that require direct internet access (DIA), which WAN Edge configuration satisfies the requirement?
Choose an answer
Tap an option to check your answer.
Correct answer: vpn 0 interface ge0/0 ip address 172.16.0.1/24 nat vpn 1 ip route 0.0.0.0/0 vpn 0.
Why this is the answer
The correct configuration enables Direct Internet Access (DIA) by routing traffic from VPN 1 (the service VPN where user devices reside) to VPN 0 (the transport VPN, which connects to the internet). The vpn 0 interface ge0/0 ip address 172.16.0.1/24 nat command configures the interface in VPN 0 with an IP address and enables Network Address Translation (NAT), essential for internet access. The vpn 1 ip route 0.0.0.0/0 vpn 0 command creates a default route in VPN 1, directing all unknown traffic to VPN 0 for internet egress. The other options are incorrect because they either misconfigure the routing between VPNs, place the internet-facing interface in the wrong VPN (e.g., VPN 1 instead of VPN 0), or omit necessary NAT configuration for DIA.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed