选择题
11.
在一台Cisco路由器上执行show access-lists命令显示如下一组限制远程登录的访问控制列表信息:
Standard IP access list 40
permit 167.112.75.89 (54 matches)
permit 202.113.65.56 (12 matches)
deny any (1581 matches)
根据上述信息,正确的access-list的配置是______。
A、
Router (config)#access-list 40 permit 167.112.75.89
Router (config)#access-list 40 permit 202.113.65.56
Router (config)#access-list 40 deny any
Router (config)#line vty 0 5
Router (config-line)#access-class 40 in
B、
Router (config)#access-list 40 permit 167.112.75.89 log
Router (config)#access-list 40 permit 202.113.65.56 log
Router (config)#access-list 40 deny any log
Router (config)#line vty 0 5
Router (config-line)#access-class 40 in
C、
Router (config)#access-list 40 permit 167.112.75.89 log
Router (config)#access-list 40 permit 202.113.65.56 log
Router (config)#access-list 40 deny any log
Router (config)#line vty 0 5
Router (config-line)#access-class 40 out
D、
Router (config)#access-list 40 permit 167.112.75.89
Router (config)#access-list 40 permit 202.113.65.56
Router (config)#access-list 40 deny any log
Router (config)#line vty 0 5
Router (config-line)#access-class 40 out
【正确答案】
A
【答案解析】
根据配置标准访问控制列表的命令格式“access-list access-list-number{permit|deny} sourcewildeard-mask”可知,B、C选项明显错误,D选项“access-list 40 deny any”后面不用加log。
提交答案
关闭