Cisco Exam 300-415 Topic 4 Question 99 Discussion

To allow VPN 10 traffic to have direct internet access locally from the WAN Edge device, the configuration must ensure that the traffic is routed correctly and that NAT (Network Address Translation) is applied to allow the traffic to exit to the internet.

1.Policy Configuration:

oNAT Use: The configuration should include a directive to use NAT for the specific VPN (VPN 10 in this case). This ensures that the traffic originating from VPN 10 can be translated and routed to the internet.

oApply Policy: The policy should be applied in the outbound direction to the appropriate interface that connects to the internet.

1.Option A Analysis:

oThis option includes the nat use-vpn 0 directive, which instructs the system to use NAT for traffic in VPN 10, allowing it to access the internet directly.

oThe apply-policy command is correctly used to apply the policy to the site list and the data-policy DPI from-service.

1.Reference:

oCisco SD-WAN NAT Configuration Guide

Cisco SD-WAN Direct Internet Access (DIA) Configuration Documentation