诺_pzj 发表于 2020-7-9 20:34:58

请教一下350-401，Q106

Which configuration restricts the amount of SSH that a router accepts 100 kbps?
C. class-map match-all CoPP_SSHmatch access-group name CoPP_SSH!Policy-map CoPP_SSHclass CoPP_SSHpolice cir 100000
exceed-action drop Control-planeservice-policy input CoPP_SSH!Ip access-list extended CoPP_SSHdeny tcp any any eq 22!D. class-map match-all CoPP_SSHmatch access-group name CoPP_SSH!Policy-map CoPP_SSHclass CoPP_SSHpolice cir 100000 exceed-action drop!Control-plane transitservice-policy input CoPP_SSH!Ip access-list extended CoPP_SSH
permit tcp any any eq 22
这题，答案说是选C，为什么不是D呢，acl里面不是应该匹配eq22的流量吗，为什么是deny呢？

AnonyKwan 发表于 2020-7-9 20:34:59

Correct answer should be D
According to the OCG,
ACLs matching traffic identified by EPC and network documentation. Notice that these ACLs do not restrict access and are open, allowing any- one to send traffic matching the protocols.

诺_pzj 发表于 2020-7-12 10:31:19

AnonyKwan 发表于 2020-7-12 10:15
Correct answer should be D
According to the OCG,
ACLs matching traffic identified by EPC and netwo ...

thanks for your help

yuypei 发表于 2020-8-18 09:08:53

感谢大佬的答案
页: [1]
查看完整版本: 请教一下350-401，Q106