In a single-hop deployment, which mode on the Citrix ADC uses the client's IP address as the source IP for ADC-to-server connections?

• A. Layer 2 Mode
• B. USNIP
• C. Layer 3 Mode
• D. USIP

Answer: (D)

In a single-hop deployment, preserving the real client identity on the way to backend servers is often essential for logging, security, and policy decisions. The mode that makes the ADC use the client’s IP as the source when talking to servers is Use Source IP. This setting ensures the traffic leaving the ADC toward the servers has the original client IP as its source, so servers see who the client really is without NATing to the ADC’s address.

Layer 2 mode acts as a transparent bridge at the data link layer, not specifically about which IP appears as the source for server connections. Layer 3 mode routes traffic and typically uses the ADC’s routing IPs as the source, not the client’s IP. USNIP uses the SNIP as the source IP for connections to servers, which means the servers don’t see the client IP. Therefore, Use Source IP is the correct choice for preserving the client’s IP on backend connections.