Cisco SD-WAN Solutions: Configuring NAT for Direct Internet Access VPNs

Configuring NAT for Direct Internet Access VPNs

Question

In which VPN is the NAT operation on an outgoing interface configured for direct Internet access?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

A.

https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/sdwan-dia-deploy-2019nov.pdf

In Cisco SD-WAN, there are different types of VPNs (Virtual Private Networks) available that allow you to securely connect different locations or devices over the internet. One of these VPN types is the Internet VPN, which provides direct internet access to branch locations without sending traffic through the data center.

When using the Internet VPN, you may want to configure NAT (Network Address Translation) on the outgoing interface to translate the private IP addresses of the branch devices into public IP addresses that can be used on the internet. To configure NAT on the outgoing interface for direct internet access, you would typically use VPN 0 or VPN 512.

VPN 0 is the default VPN in Cisco SD-WAN, which is used for traffic that doesn't match any other VPNs. This includes traffic that needs to be sent directly to the internet without going through the data center. Therefore, you could configure NAT on the outgoing interface for VPN 0 to enable direct internet access.

Alternatively, you could use VPN 512 for direct internet access, as it is reserved for use as the default internet VPN. This VPN is automatically created when you configure a vEdge router as a vSmart controller or a vBond orchestrator. Traffic that matches the default internet VPN is automatically sent to this VPN, which can be used to configure NAT on the outgoing interface.

Therefore, the correct answer to the question would be either A (0) or B (512), depending on the specific implementation of Cisco SD-WAN.