A router performing PAT is using a single public IPv4 address for many inside hosts. Which value most often distinguishes one inside flow from another on the same outside address?

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

Technical deep dive

How to think about this question

Port Address Translation (PAT), a form of Network Address Translation (NAT), allows multiple inside hosts to share a single public IPv4 address by differentiating their sessions using Layer 4 port numbers. When inside hosts initiate connections to outside networks, PAT translates their private IP addresses and source ports to the router's public IP address and unique source ports. This multiplexing enables many simultaneous flows to coexist over one public IP, conserving IPv4 address space. The key mechanism PAT uses to distinguish one inside flow from another on the same outside address is the TCP or UDP source port number. Each translated session is assigned a unique source port number on the router’s public IP address, creating a unique tuple of (public IP, source port, destination IP, destination port) that identifies the flow. This allows the router to correctly forward return traffic to the originating inside host by reversing the translation. A common exam trap is confusing PAT’s use of port numbers with other packet header fields like TTL or DSCP. TTL decrements at each hop and does not uniquely identify flows, while DSCP is a QoS marking unrelated to NAT translation. MAC addresses are not preserved across routed boundaries, so they cannot distinguish flows in PAT. Understanding that PAT relies on Layer 4 port multiplexing is critical for Cisco CCNA exam success and practical NAT troubleshooting.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask