柠檬试题库
search
首页 计算机 公务员 驾照 关于

在一台Cisco路由器的g3/1接口,封禁ICMP协议,只允许转发168.105.129.0/24子网的ICMP数据包,正确的访问控制列表的配置是()。


  • A.Router(config)#interface g3/1 Router(config-if)#ip access-group 198 in Router(config-if)#ip access-group 198 out Router(config-if)#exit Router(config)#access-list 198 permit icmp 168.105.129.0 0.0.0.255 any Router(config)#access-list 198 deny icmp any any Router(config)#access-list 198 permit ip any any
  • B.Router(config)#access-list 2000 permit icmp 168.105.129.0 0.0.0.255 any Router(config)#access-list 2000 deny icmp any any Router(config)#access-list 2000 permit ip any any Router(config)#interface g3/1 Router(config-if)#ip access-group 2000 in Router(config-if)#ip access-group 2000 out Router(config-if)#exit
  • C.Router(config)#access-list 198 deny icmp any any Router(config)#access-list 198 permit icmp 168.105.129.0 0.0.0.255 any Router(config)#access-list 198 permit ip any any Router(config)#interface g3/1 Router(config-if)#ip access-group 198 out Router(config-if)#exit
  • D.Router(config)#access-list 100 permit icmp 168.105.129.0 0.0.0.255 any Router(config)#access-list 100 permit ip any any Router(config)#access-list 100 deny icmp any any Router(config)#interface g3/1 Router(config-if)#ip access-group 100 in Router(config-if)#exit
热度🔥494
参考答案:B
解析:打开微信小程序查看本题解析