Which mode preserves the client's IP in server connections during a single-hop deployment?

• A. Layer 2 Mode
• B. USNIP
• C. Layer 3 Mode
• D. USIP

Answer: (D)

Preserving the client’s real address when the gateway connects to backend servers is achieved by making the server connections originate from the client’s IP rather than from the gateway itself. In a single-hop deployment, the option that enables this behavior is the one that uses the client’s IP as the source IP for the server-side connections. This ensures the backend servers see the actual client address, which is important for accurate logging, auditing, and IP-based decisions.

The alternative that uses the gateway’s SNIP as the source for server connections would cause the backend to see the gateway’s address instead of the client’s, which means the client IP isn’t preserved. Layer 2 and Layer 3 modes describe how the appliance is placed in the network (bridging vs routing) and do not by themselves guarantee client IP preservation. Therefore, using the mode that uses the client’s IP as the source for server connections is the correct choice.