350-501 · Question #229
Refer to the exhibit. A network engineer notices that router R2 is failing to install network 172.16.33.1/32 in the routing table. Which configuration must the engineer apply to R2 to fix the problem?
The correct answer is C. R2(config)# access-list 1 permit 172.16.33.0 0.0.0.255. If a router is failing to install a specific /32 host route, an access-list acting as a route filter needs to be configured correctly to permit that precise IP address.
Question
Refer to the exhibit. A network engineer notices that router R2 is failing to install network 172.16.33.1/32 in the routing table. Which configuration must the engineer apply to R2 to fix the problem?
Exhibit
Options
- AR2(config)# access-list 1 permit 172.16.33.0 255.0.0.0
- BR2(config)# access-list 1 permit 172.16.33.0 255.255.255.0
- CR2(config)# access-list 1 permit 172.16.33.0 0.0.0.255
- DR2(config)# access-list 1 permit 172.16.33.0 255.255.0.0
How the community answered
(56 responses)- A5% (3)
- B9% (5)
- C84% (47)
- D2% (1)
Why each option
If a router is failing to install a specific /32 host route, an access-list acting as a route filter needs to be configured correctly to permit that precise IP address.
A wildcard mask of 255.0.0.0 is syntactically incorrect for a standard access list; wildcard masks are inverse masks and should have zeros for bits that must match and ones for bits that can vary.
A wildcard mask of 255.255.255.0 is syntactically incorrect; it should be an inverse mask (e.g., 0.0.0.255 for a /24 network).
The access-list entry 'permit 172.16.33.0 0.0.0.255' uses a wildcard mask that matches any IP address within the 172.16.33.0/24 subnet. This range includes 172.16.33.1, thereby allowing the 172.16.33.1/32 route to be permitted and installed in the routing table if this ACL is used for filtering.
A wildcard mask of 255.255.0.0 is syntactically incorrect for a standard access list, as it does not follow the inverse mask convention for specifying network ranges.
Concept tested: Cisco ACL wildcard masks for route filtering
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_acl/configuration/xe-16/sec-acl-xe-16-book/sec-acl-overview.html
Topics
Community Discussion
No community discussion yet for this question.
