PrepAway - Latest Free Exam Questions & Answers

how can the network administrator ensure that this traffic is never blocked while leaving the current protecti

View the exhibit.

A network administrator has activated connection rate filtering on an HP 8200 zl Series switch with
the throttle action and medium sensitivity. However, a server connected to port A1 in VLAN 10 (IP
address 10.1.10.10) needs to establish many connections with other backend servers as part of its
typical behavior. The ports that this server uses are TCP 50000-50020.
Based on the information provided in the exhibit, how can the network administrator ensure that
this traffic is never blocked while leaving the current protections in effect?

PrepAway - Latest Free Exam Questions & Answers

A.
Apply Filter2 to VLAN 10 as a connection rate filter.

B.
Apply Filter1 to port A1 as a connection rate filter.

C.
Apply Filter2 to port A1 as a connection rate filter.

D.
Apply Filter1 to VLAN 10 as a connection rate filter.

Explanation:
Applying Connection-Rate ACLs To apply a connection-rate ACL, you use the vlan
<vid> ip access-group
command:
Eseries(config)# vlan <vid> ip access-group <acl-id> connection-rate-filter
A connection-rate ACL is applied at the VLAN level, but the ACL is evaluated for inbound traffic
only on ports configured for connection-rate filtering in that VLAN. The ACL has no effect on ports
in the VLAN that are not configured for connection-rate filtering.
The switch allows only one connection-rate ACL assignment per VLAN. If a connection-rate ACL
is already assigned to a VLAN and you assign another connection-rate ACL to that VLAN, the
second ACL overwrites the first one. A connection-rate ACL can be used in addition to any
standard or extended ACLs already assigned to
the VLAN.
Example Configuration with Connection-Rate ACL
ip access-list connection-rate-filter “crf01-server”
10 ignore tcp 10.1.10.10 0.0.0.0 destionation-port eq 1812
exit
vlan 10
name “VLAN10”
untagged A1-A4
ip helper-address 10.1.10.10
ip address 10.1.10.1 255.255.255.0
ip access-group “crf01-server” connection-rate-filter
exit


Leave a Reply