在一台Cisco路由器上封禁ICMP协议,只允许215.192.40.16/28和202.204.28.2/24子网的ICMP数据包通过路由器,下列正确的access-list配置是

admin2014-05-09  34

问题 在一台Cisco路由器上封禁ICMP协议,只允许215.192.40.16/28和202.204.28.2/24子网的ICMP数据包通过路由器,下列正确的access-list配置是

选项 A、Router (config)#access-list 98 permit icmp 215.192.40.16 0.0.0.15 any
   Router (config)#access-list 98 permit icmp 202.204.28.0 0.0.0.255 any
   Router (config)#access-list 98 deny icmp any any
   Router (config)#access-list 98 permit ip any any
   Route
B、Router (config)#access-list 198 permit icmp 215.192.40.16 0.0.0.15 any
   Router (config)#access-list 198 permit icmp 202.204.28.0 0.0.0.255 any
   Router (config)#access-list 198 permit ip any any
   Router (config)#access-list 198 deny icmp any any
   
C、Router (config)#access-list 198 permit icmp 215.192.40.16 0.0.0.15 any
   Router (config)#access-list 198 permit icmp 202.204.28.0 0.0.0.255 any
   Router (config)#access-list 198 deny icmp any any
   Router (config)#access-list 198 permit ip any any
   R
D、Router (config)#access-list 100 permit icmp 215.192.40.16 255.255.255.240 any
   Router (config)#access-list 100 permit icmp 202.204.28.0 255.255.255.0 any
   Router (config)#access-list 100 deny icmp any any
   Router (config)#access-list 100 permit ip a

答案C

解析
转载请注明原文地址:https://kaotiyun.com/show/vwZZ777K
0

最新回复(0)