300-410 Exam QuestionsBrowse all questions from this exam

300-410 Exam - Question 140


Refer to the exhibit. When monitoring an IPv6 access list, an engineer notices that the ACL does not have any hits and is causing unnecessary traffic through the interface

Which command must be configured to resolve the issue?

Show Answer
Correct Answer: BC

To apply an IPv6 access list (ACL) to an interface and control the traffic flowing through it, the correct command to use is 'ipv6 traffic-filter'. The 'access-class' command is typically used for filtering traffic in virtual terminal (vty) lines, not on interfaces. To resolve the issue of the ACL not getting any hits and causing unnecessary traffic, the correct configuration would be to apply the 'ipv6 traffic-filter' command in the interface configuration mode.

Discussion

17 comments
Sign in to comment
Mishranihal737Option: B
Oct 6, 2023

It’s asking for interface that’s why traffic-filter. Access-class is used for control plane.

KoumeOption: B
Jan 22, 2023

B, because is talking about incesary traffic for the interface. Access Class is for apply Line vty ACL.

Brand
Aug 12, 2023

So line vty isn't an interface?

jarzOption: B
Oct 6, 2022

traffic-filter

inteldarvidOption: B
Jul 11, 2023

the answer corret is B: Line vty: acces-class line interface: traffic-filter https://www.cisco.com/c/en/us/td/docs/ios/ipv6/command/reference/ipv6_book/ipv6_05.html#wp2274594

ChiarettaOption: B
Jul 18, 2023

Answer is B

sgtmajvimyOption: B
Aug 1, 2023

i concur, its B

BrandOption: B
Aug 27, 2023

R1(config-if)#ipv6 traffic-filter ? WORD Access-list name R1(config-if)#ipv6 traffic-filter

MasterP007Option: C
Sep 27, 2022

C - is Incorrect. There's no access-class in IPv6 R4(config-if)#ipv6 access-class INTERNET in ^

jarzOption: B
Sep 28, 2022

As AliMo123 says

KapodusterOption: B
Oct 17, 2022

B is correct. : R2(config-if)#ipv6 traff? traffic-filter R2(config-if)#ipv6 acces? % Unrecognized command R2(config-if)#ipv6 acces

CisconAWSGURUOption: B
Nov 18, 2022

Answer is B

sajjad_gayyemOption: C
Jul 3, 2023

Im going with C, hence its denied and permitted the telnet traffics, so this ACl must be applied under the VTY lines, so for VTY line we must use Applying an IPv6 ACL to the Virtual Terminal Line SUMMARY STEPS 1. enable 2. configure terminal 3. line [aux| console| tty| vty] line-number[ending-line-number] 4. ipv6 access-class ipv6-access-list-name {in| out} https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/xe-16/sec-data-acl-xe-16-book/ip6-acls-xe.html

Duck2DuckOption: B
Jul 22, 2022

Bad ipv6 acl… breaks neighbor discovery. Otherwise..B

NoUserName1234Option: B
Sep 18, 2022

When reading the mentioned link it's clear that it's answer B, as Alimo also states

mrnipsnipsOption: C
Nov 14, 2022

Traffic filter

Noproblem22Option: B
Nov 23, 2022

B is right https://community.cisco.com/t5/network-security/ipv6-access-class-vs-ipv6-traffic-filter/td-p/1510357#:~:text=The%20%27ipv6%20access-class%27%20command%20is%20used%20to%20filter,%28i.e.%20management%20traffic%29.%20Command%20reference%20%28with%20example%29%3A%20http%3A%2F%2Fwww.cisco.com%2Fen%2FUS%2Fdocs%2Fios%2Fipv6%2Fcommand%2Freference%2Fipv6_05.html%23wp2274594

SeMo0o0o0Option: B
Jul 18, 2024

it´s B