200-301: Cisco Certified Network AssociateDemo

By Cisco · Question Mode

QuestionQ1071

Network Access

An administrator is configuring a Cisco Catalyst switch so that it accepts management connections only from hosts in the 203.0.113.0/24 network.

All other traffic that passes through the switch must continue to transit without interruption.

Which two configurations must the engineer apply to the router?

Choose two
  • A interface range vlan 1 - 4094ip access-group Management out
  • B line vty 0 15access-class Management in
  • C ip access-list standard Managementpermit 203.0.113.0 0.0.0.255
  • D ip access-list standard Managementpermit 203.0.113.0 255.255.255.0
  • E ip access-list extended Managementpermit tcp any range 22 23 203.0.113.0 0.0.0.255
Explanation

To limit management access without disrupting transit traffic, the filter must be applied to the VTY lines by using access-class so only remote management sessions are checked. The ACL should be a standard ACL that permits the allowed source subnet 203.0.113.0/24, expressed with the Cisco wildcard mask 0.0.0.255. This combination restricts inbound Telnet/SSH-style management access to the device itself while leaving other forwarded traffic unaffected.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!