QuestionQ482

Infrastructure Security

Question Image

Refer to the exhibit. Which action resolves the intermittent connectivity seen with the SNMP trap packets?

  • A Decrease the committed burst size of the mgmt class map.
  • B Increase the CIR of the mgmt class map.
  • C Add one new entry in the ACL 120 to permit the UDP port 161.
  • D Add a new class map to match TCP traffic.
Explanation

The control-plane policer classifies the SNMP trap packets through ACL 120, but its 8000-bps committed information rate is too low: 353 packets exceed that rate and are dropped, whereas only 8 conforming packets are transmitted. Increasing the CIR raises the rate at which the policer treats trap traffic as conforming. SNMP traps use UDP destination port 162; UDP port 161 is used for SNMP queries, not traps. Cisco documents that a policer forwards conforming traffic and can drop traffic exceeding the configured CIR.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!