A CoPP policy polices inbound Telnet to 100 kbps but must not apply to traffic from 10.1.1.1 and 172.16.1.1. Which configuration set resolves the issue?
Choose an answer
Tap an option to check your answer.
Correct answer: no access-list 101 ; access-list 101 deny tcp host 10.1.1.1 any eq 23 ; access-list 101 deny tcp host 172.16.1.1 any eq 23 ; access-list 101 permit ip any any.
Why this is the answer
The correct answer defines an Access Control List (ACL) that exempts specific source IP addresses from CoPP. The deny statements for 10.1.1.1 and 172.16.1.1 for Telnet (port 23) ensure that traffic from these sources matching the CoPP policy will not be policed. The final permit ip any any statement is crucial; without it, all other traffic would be implicitly denied, preventing the CoPP policy from applying to any other Telnet traffic. The other options either remove or reapply the CoPP policy without addressing the exemption requirement, or incorrectly apply the ACL to an interface instead of using it within a CoPP policy map.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed