View all questions & answers for the BIG-IP Administration Data Plane Configuration (F5CAB3) exam

BIG-IP Administration Data Plane Configuration (F5CAB3) - Question #2 Discussion

Comment Image Comment Image Comment Image

A BIG-IP Administrator finds the following log entry after a report of user issues connecting to a virtual server: 01010201: Intercept exhaustion on 10.70.110.112 to 192.28.123.250:80 (proto 6) How should the BIG-IP Administrator modify the SNAT pool that is associated with the virtual server? (Choose one answer)

  • A. Increase the timeout of the SNAT addresses
  • B. Remove the SNAT pool and apply SNAT Automap
  • C. Remove an IP address from the SNAT pool
  • D. Add an IP address to the SNAT pool
Correct Answer: D

Brave-Dump Community Votes

Answer: D (1 vote) 100%

Community Explanations & Comments (1)

Anonymous User 1 week ago
Selected: D
: The log message "Intercept exhaustion" (01010201) means BIG-IP has run out of available source ports for SNAT translations toward a given destination (here 192.28.123.250:80). Each SNAT IP address can support only about 64,000 simultaneous connections to a single destination IP and port combination. Once every port on every SNAT address in the pool is in use for that destination, new connections cannot be translated, and users see connection failures.
Adding more IP addresses to the SNAT pool expands the number of unique source IP and port combinations available, which directly relieves the exhaustion.