题目内容:
在一台Cisco路由器的g0/1端口上,用标准访问控制列表禁止源地址为10.0.0.0~10.255.255.255和172.16.0.0~172.31.255.255的数据包进出路由器。下列access-list配置,正确的是
A.Router(config)#access-list30deny10.0.0.0255.0.0.0logRouter(config)#access-list30deny172.16.0.0255.240.0.0
Router(config)#access-list30permitany
Router(config)#interfaceg0/1
Router(config-if)#ipaccess–group30in
Router(config-if)#ipaccess–group30out
B.Router(config)#access-list30deny10.0.0.00.255.255.255log
Router(config)#access-list30deny172.16.0.00.15.255.255
Router(config)#access-list30permitany
Router(config)#interfaceg0/1
Router(config-if)#ipaccess-group30in
Router(config-if)#ipaccess-group30out
C.Router(config)#access-list100deny10.0.0.00.255.255.255log
Router(config)#access-list100deny172.16.0.00.15.255.255
Router(config)#access-list100permitany
Router(config)#interfaceg0/1
Router(config-if)#ipaccess-group100in
Router(config-if)#ipaccess-group100out
D.Router(config)#interfaceg0/1
Router(config-if)#ipaccess-group99in
Router(config-if)#ipaccess-group99out
Router(config-if)#exit
Router(config)#access-list99deny10.0.0.00.255.255.255log
Router(config)#access-list99deny172.16.0.00.15.255.255
Router(config)#access-list99permitany
参考答案:【答案仅供学习,请勿对照自行用药等】
答案解析: