300-410 · Question #75
Refer to the exhibit. A junior engineer updated a branch router configuration. Immediately after the change, the engineer receives calls from the help desk that branch personnel cannot reach any…
The correct answer is D. route-map FILTER-IN permit 20. The current route-map contains only a 'deny' statement, causing an implicit 'deny all' at the end that blocks all other routes, so adding a 'permit' statement ensures desired routes are accepted.
Question
Options
- Aroute-map FILTER-IN deny 5
- Bip prefix-list 102 seq 15 permit 0.0.0.0/32 le 32
- Cip prefix-list 102 seq 5 permit 0.0.0.0/32 le 32
- Droute-map FILTER-IN permit 20
How the community answered
(31 responses)- A6% (2)
- B6% (2)
- C16% (5)
- D71% (22)
Why each option
The current route-map contains only a 'deny' statement, causing an implicit 'deny all' at the end that blocks all other routes, so adding a 'permit' statement ensures desired routes are accepted.
Adding another `deny` statement at a lower sequence number would not resolve the issue of the implicit `deny all` blocking all valid routes.
Modifying the `ip prefix-list 102` with a `permit 0.0.0.0/32 le 32` at `seq 15` would add a permit-all entry *after* the specific permit, but since the route-map's `deny 10` matches this prefix-list, it would then deny all traffic, worsening the problem.
Modifying the `ip prefix-list 102` with a `permit 0.0.0.0/32 le 32` at `seq 5` would cause everything to match `prefix-list 102`, which is then used by `deny 10` in the route-map, resulting in all routes being denied.
The existing `route-map FILTER-IN` only has a `deny 10` statement that matches `10.1.1.100/32`. Due to the implicit `deny all` at the end of every route-map, any route that does not match statement 10 is denied. Adding `route-map FILTER-IN permit 20` creates a permit statement at the end of the route-map, which will permit all other routes that did not match the `deny 10` statement, thereby restoring network service while still blocking `10.1.1.100/32`.
Concept tested: Route-map implicit deny, distribute-list
Source: https://www.cisco.com/c/en/us/td/docs/ios/iproute/command/ip_route_c_book/irc_pi1.html#wp1010372
Topics
Community Discussion
No community discussion yet for this question.