300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and ServicesDemo

By Cisco · Question Mode

QuestionQ307

Infrastructure Services

Question Image

Refer to the exhibit. R1 is configured with IP SLA to verify availability of the server behind R6, but the check continues to fail.

Which configuration resolves the issue?

  • A R6(config)#ip sla responder udp-echo ip address 10.10.10.1 port 5000
  • B R6(config)#ip access-list extended DDOS R6(config-ext-nacl)#5 permit icmp host 10.10.10.1 host 10.66.66.66
  • C R6(config)#ip sla responder
  • D R6(config)#ip access-list extended DDOS R6(config-ext-nacl)#5 permit icmp host 10.66.66.66 host 10.10.10.1
Explanation

The inbound DDOS ACL on R6 denies ICMP before its general IP permit, blocking R1’s ICMP echo request from source 10.10.10.1 to destination 10.66.66.66. Adding the sequence-5 permit for that exact flow places it before the deny and allows the IP SLA probe to reach the server. An IP SLA responder is not required for an ICMP echo operation. Cisco IP SLA ICMP Echo Operations

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!