Exam 300-410 All QuestionsBrowse all questions from this exam
Question 140

Refer to the exhibit. When monitoring an IPv6 access list, an engineer notices that the ACL does not have any hits and is causing unnecessary traffic through the interface

Which command must be configured to resolve the issue?

    Correct Answer: B

    To apply an IPv6 access list (ACL) to an interface and control the traffic flowing through it, the correct command to use is 'ipv6 traffic-filter'. The 'access-class' command is typically used for filtering traffic in virtual terminal (vty) lines, not on interfaces. To resolve the issue of the ACL not getting any hits and causing unnecessary traffic, the correct configuration would be to apply the 'ipv6 traffic-filter' command in the interface configuration mode.

Discussion
Mishranihal737Option: B

It’s asking for interface that’s why traffic-filter. Access-class is used for control plane.

KoumeOption: B

B, because is talking about incesary traffic for the interface. Access Class is for apply Line vty ACL.

Brand

So line vty isn't an interface?

BrandOption: B

R1(config-if)#ipv6 traffic-filter ? WORD Access-list name R1(config-if)#ipv6 traffic-filter

sgtmajvimyOption: B

i concur, its B

ChiarettaOption: B

Answer is B

inteldarvidOption: B

the answer corret is B: Line vty: acces-class line interface: traffic-filter https://www.cisco.com/c/en/us/td/docs/ios/ipv6/command/reference/ipv6_book/ipv6_05.html#wp2274594

jarzOption: B

traffic-filter

sajjad_gayyemOption: C

Im going with C, hence its denied and permitted the telnet traffics, so this ACl must be applied under the VTY lines, so for VTY line we must use Applying an IPv6 ACL to the Virtual Terminal Line SUMMARY STEPS 1. enable 2. configure terminal 3. line [aux| console| tty| vty] line-number[ending-line-number] 4. ipv6 access-class ipv6-access-list-name {in| out} https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/xe-16/sec-data-acl-xe-16-book/ip6-acls-xe.html

CisconAWSGURUOption: B

Answer is B

KapodusterOption: B

B is correct. : R2(config-if)#ipv6 traff? traffic-filter R2(config-if)#ipv6 acces? % Unrecognized command R2(config-if)#ipv6 acces

jarzOption: B

As AliMo123 says

MasterP007Option: C

C - is Incorrect. There's no access-class in IPv6 R4(config-if)#ipv6 access-class INTERNET in ^

SeMo0o0o0Option: B

it´s B

Noproblem22Option: B

B is right https://community.cisco.com/t5/network-security/ipv6-access-class-vs-ipv6-traffic-filter/td-p/1510357#:~:text=The%20%27ipv6%20access-class%27%20command%20is%20used%20to%20filter,%28i.e.%20management%20traffic%29.%20Command%20reference%20%28with%20example%29%3A%20http%3A%2F%2Fwww.cisco.com%2Fen%2FUS%2Fdocs%2Fios%2Fipv6%2Fcommand%2Freference%2Fipv6_05.html%23wp2274594

mrnipsnipsOption: C

Traffic filter

NoUserName1234Option: B

When reading the mentioned link it's clear that it's answer B, as Alimo also states

Duck2DuckOption: B

Bad ipv6 acl… breaks neighbor discovery. Otherwise..B