300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and ServicesDemo

By Cisco · Question Mode

QuestionQ35

Layer 3 Technologies

Question Image

Refer to the exhibit. A network administrator configured an IPv6 access list to permit only TCP return traffic, but it is not operating as intended.

Which changes fix this issue?

  • A
  • B
  • C
  • D
Explanation

The established TCP ACL keyword matches TCP packets with the ACK or RST flag set, identifying return traffic for an existing TCP connection. Applying that ACL with ipv6 traffic-filter inbound in filters packets as they enter Gi0/0; syn instead matches connection-initiation traffic.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!