300-415: Implementing Cisco Catalyst SD-WAN Solutions

By Cisco · Question Mode

QuestionQ48

Security and Quality of Service

Question Image

Drag the code snippets shown below into the configuration boxes to stop ICMP packets from the internet circuit from reaching VPN10 users at site 101. Some options will not be used.

Drag & Drop
data-policy VPN10_Data_Policy
  vpn-list VPN10
    sequence 1
      match
        
        source-ip 10.10.10.0/24
      action 
  default-action
Explanation

IPv4 ICMP uses Internet Protocol number 1; protocol 58 is ICMPv6, while protocol 2 is IGMP. Cisco SD-WAN data-policy action drop discards packets that match the sequence, and default-action accept permits all other packets.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!