Which command configures NAT masquerading for outbound traffic on interface named wan?

Which command configures NAT masquerading for outbound traffic on interface named wan?

• A. /ip firewall nat add chain=dstnat out-interface=wan action=masquerade
• B. /ip firewall nat add chain=srcnat out-interface=wan action=masquerade
• C. /ip firewall nat add chain=srcnat out-interface=wan action=masquerade
• D. /ip firewall nat add chain=srcnat out-interface=wan masquerade

Answer: (C)

Source NAT is used for traffic going from your private network to the internet. For outbound traffic, you place a NAT rule in the srcnat chain and specify the WAN interface as the out-interface, with masquerade as the action. This makes all outbound packets appear to come from the WAN IP, so return traffic comes back correctly, and it works well with dynamic or shared IPs. The exact command is: /ip firewall nat add chain=srcnat out-interface=wan action=masquerade. Using a destination NAT rule would be for incoming traffic redirection, not outbound NAT, and omitting the action parameter would make the rule invalid syntax.

Source NAT is used for traffic going from your private network to the internet. For outbound traffic, you place a NAT rule in the srcnat chain and specify the WAN interface as the out-interface, with masquerade as the action. This makes all outbound packets appear to come from the WAN IP, so return traffic comes back correctly, and it works well with dynamic or shared IPs. The exact command is: /ip firewall nat add chain=srcnat out-interface=wan action=masquerade. Using a destination NAT rule would be for incoming traffic redirection, not outbound NAT, and omitting the action parameter would make the rule invalid syntax.