在一台Cisco路由器的#/1端口封禁ICMP协议,只允许169.15.128.0/24和119.75.108.0/24子网的ICMP数据包通过路由器,正确的access-list配置是

admin2020-01-14  32

问题 在一台Cisco路由器的#/1端口封禁ICMP协议,只允许169.15.128.0/24和119.75.108.0/24子网的ICMP数据包通过路由器,正确的access-list配置是

选项 A、Router(config)#access-list 1 98 deny icmp any any
Router(config)#access-list 198 permit icmp 169.15.128.00.0.0.255 any
Router(config)#access-list 198 permit icmp 11 9.75.1 08.00.0.0.255 any
Router(config)#access-list 198 permit ip any any
Router(config)#interface g0/1
Router(config-if)#ip access-group 1 98 in
Router(config.if)#ip access-group 1 98 out
Router(config-if)#
B、Router(config)#access-list 198 permit icmp 169.15.128.00.0.0.255 any
Router(config)#access-list 198 permit icmp 119.75.108.00.0.0.255 any
Router(config)#access-list 1 98 deny icmpany any
Router(config)#access-list 1 98 permit ip any any
Router(config)#interface g0/1
Router(config-if)#ip access-group 1 98 in
Router(config-if)#ip access-group 1 98 out
Router(config-if)#
C、Router(config)#access-1ist 98 permit icmp 169.15.128.00.0.0.255 any
Router(config)#access-list 98 permit icmp 11 9.75.108.00.0.0.255 any
Router(config)#access-list 98 deny icmp any any
Router(config)#access-list 98 permit lp any any
Router(config)#interfaceg0/1
Router(config-if)#ip access-group 98 in
Router(config-if)#ip access—group 98 out
Router(config-if)#
D、Router(config)#access-list 100 permit icmp 169.15:128.00.0.0.255 any
Router(config)#access-list 100 permit icmp 119.75.108.00.0.0.255 any
Router(config)#access-list 1 00 permit ip any any
Router(config)#access-list 1 00 deny icmp any any
Router(config)#interface g0/1
Router(config-if)#ip access-group 1 00 In
Router(config-if)#ip access-group 1 00 out
Router(confiR-if)#

答案B

解析
转载请注明原文地址:https://kaotiyun.com/show/hNdZ777K
0

最新回复(0)