Control Plane Policing should limit inbound SSH to 500 kbps for 10.10.10.0/24 and 192.168.10.0/24. ACL 100 currently permits ip 10.10.10.0/24 any and tcp 192.168.10.0/24 eq 23; class-map matches ACL 100; policy applied on interfaces E0/0 and E0/1. CoPP is not enforcing SSH. Which configuration fixes the problem?
Choose an answer
Tap an option to check your answer.
Correct answer: no access-list 100 access-list 100 permit tcp 10.10.10.0 0.0.0.255 any eq 22 access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 22 ! interface E0/0 no service-policy input PM-COPP ! interface E0/1 no service-policy input PM-COPP ! control-plane service-policy input PM-COPP.
Why this is the answer
The correct answer fixes multiple issues. First, the original ACL 100 permitted IP traffic from 10.10.10.0/24 and TCP port 23 (Telnet) from 192.168.10.0/24, not SSH (port 22). The corrected ACL permits TCP port 22 for both subnets. Second, CoPP policies are applied to the control plane, not individual interfaces. The original configuration applied the policy to E0/0 and E0/1, which is incorrect for CoPP. The corrected configuration removes the policy from the interfaces and applies it globally to the control-plane. The other options either only fix the ACL, only fix the policy application, or incorrectly modify the policing action.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed