Cisco
300-730 · Question #14
Refer to the exhibit. ip access-list extended CCNP permit 192.168.0.10 permit 192.168.0.11 webvpn gateway SSL_Gateway ip address 172.16.0.25 port 443 ssl trustpoint AnyConnect_Cert inservice webvpn co
Sign in or unlock 300-730 to reveal the answer and full explanation for question #14. The question stem and answer options stay visible for context.
Remote Access VPN
Question
Refer to the exhibit.
ip access-list extended CCNP
permit 192.168.0.10
permit 192.168.0.11
webvpn gateway SSL_Gateway
ip address 172.16.0.25 port 443
ssl trustpoint AnyConnect_Cert
inservice
webvpn context SSL_Context
gateway SSL_Gateway
ssl authenticate verify all
inservice
policy group SSL_Policy
functions svc-enabled
svc address-pool "ACPool" netmask 255.255.255.0
svc dns-server primary 192.168.0.100
svc default-domain cisco.com
default-group-policy SSL_Policy
Cisco AnyConnect must be set up on a router to allow users to access internal servers 192.168.0.10 and 192.168.0.11. All other traffic should go out of the client's own NIC. Which command accomplishes this configuration?
Options
- Asvc split exclude 192.168.0.0 255.255.0
- Bsvc split exclude 192.168.0.0 255.255.0
- Csvc split include acl CCNP
- Dsvc split exclude acl CCNP
Unlock 300-730 to see the answer
You've previewed enough free 300-730 questions. Unlock 300-730 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#AnyConnect#split tunneling#svc split include#IOS router