HPE7-A01 · Question #23
In AOS 10, which session-based ACL below will only allow ping from any wired station to wireless clients but will not allow ping from wireless clients to wired stations?
The correct answer is D. ip access-list session pingFromWired any any svc-icmp deny any user svc-icmp permit. A session-based ACL is applied to traffic entering or leaving a port or VLAN based on the direction of the session initiation. To allow ping from any wired station to wireless clients but not vice versa, a session-based ACL should be used to deny icmp echo traffic from any…
Question
In AOS 10, which session-based ACL below will only allow ping from any wired station to wireless clients but will not allow ping from wireless clients to wired stations?
Options
- Aip access-list session pingFromWired any user any permit
- Bip access-list session pingFromWired user any svc-icmp deny any any svc-icmp permit
- Cip access-list session pingFromWired any any svc-icmp permit user any svc-icmp deny
- Dip access-list session pingFromWired any any svc-icmp deny any user svc-icmp permit
How the community answered
(35 responses)- A9% (3)
- B20% (7)
- C6% (2)
- D66% (23)
Explanation
A session-based ACL is applied to traffic entering or leaving a port or VLAN based on the direction of the session initiation. To allow ping from any wired station to wireless clients but not vice versa, a session-based ACL should be used to deny icmp echo traffic from any source to any destination, and then permit icmp echo-reply traffic from any source to user destination. The user role represents wireless clients in AOS 10.
Topics
Community Discussion
No community discussion yet for this question.