300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and ServicesDemo

By Cisco · Question Mode

QuestionQ144

Infrastructure Security

Question Image

Refer to the exhibit. An engineer is attempting to log in to R1 through the R3 loopback address. Which action resolves the issue?

  • A Add transport input SCP.
  • B Remove the IPv6 traffic filter from R1, which is blocking the SSH.
  • C Remove the IPv6 traffic filter from R1, which is blocking the Telnet.
  • D Add transport input none.
Explanation

IPv6 connectivity between the loopback addresses is confirmed by the successful ICMPv6 echo replies, and the VTY lines allow Telnet. The failed connection is a Telnet session to TCP port 23, so the IPv6 traffic filter that denies Telnet must be removed. Cisco documents this same behavior: an IPv6 ACL can permit ICMPv6 reachability while denying Telnet access to a router.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!