客户路由器MSR-1 的以太网口Ethernet1/0 配置如下:interface Ethernet0/0ip address 192.168.0.1 255.255.255.0该接口连接了一台三层交换机,而此三层交换机为客户办公网络的网段192.168.7.0/24~192.168.83.0/24 的默认网关所在。现在客户要求在MSR-1 上配置ACL 来禁止办公网络所有用户向MSR-1 的地址192.168.0.1发起Telnet,那么下面哪项配置是正确的?
1873 次浏览
- A、acl number 3000 rule 0 deny 0.0.0.0 255.255.255.255 destination 192.168.0.1 0 destination-port eq telnet interface Ethernet0/0 ip address 192.168.0.1 255.255.255.0 firewall packet-filter 3000 inbound
- B、acl number 3000 rule 0 deny 0.0.0.0 255.255.255.255 destination 192.168.0.1 0 destination-port eq telnet interface Ethernet0/0 ip address 192.168.0.1 255.255.255.0 firewall packet-filter 3000 outbound
- C、acl number 3000 rule 0 deny 255.255.255.255 0 destination 192.168.0.1 0 destination-port eq telnet interface Ethernet0/0 ip address 192.168.0.1 255.255.255.0 firewall packet-filter 3000 inbound
- D、acl number 3000 rule 0 deny 255.255.255.255 0 destination 192.168.0.1 0 destination-port eq telnet interface Ethernet0/0 ip address 192.168.0.1 255.255.255.0 firewall packet-filter 3000 outbound
微信公众号