PrepAway - Latest Free Exam Questions & Answers

how can the network administrator ensure that this traffic is never blocked while leaving the current protecti

View the exhibit.

A network administrator has activated connection rate filtering on an HP 8200 zl Series switch with the throttle
action and medium sensitivity. However, a server connected to port A1 in VLAN 10 (IP address 10.1.10.10)
needs to establish many connections with other backend servers as part of its typical behavior. The ports that
this server uses are TCP 50000-50020. Based on the information provided in the exhibit, how can the network
administrator ensure that this traffic is never blocked while leaving the current protections in effect?

PrepAway - Latest Free Exam Questions & Answers

A.
Apply Filter2 to VLAN 10 as a connection rate filter.

B.
Apply Filter1 to port A1 as a connection rate filter.

C.
Apply Filter2 to port A1 as a connection rate filter.

D.
Apply Filter1 to VLAN 10 as a connection rate filter.

Explanation:
Applying Connection-Rate ACLs To apply a connection-rate ACL, you use the vlan <vid> ip access-group
command:
Eseries(config)# vlan <vid> ip access-group <acl-id> connection-rate-filter
A connection-rate ACL is applied at the VLAN level,but the ACL is evaluated for inbound traffic only on ports
configured for connection-rate filtering in that VLAN. The ACL has no effect on ports in the VLAN thatare not
configured for connection-rate filtering.
The switch allows only one connection-rate ACL assignment per VLAN. If a connection-rate ACL is already
assigned to a VLAN and you assign another connection-rate ACL to that VLAN, the second ACL overwrites the
first one. A connection-rate ACL can be used in addition to any standard or extended ACLs already assigned to
the VLAN.
Example Configuration with Connection-Rate ACL
ip access-list connection-rate-filter “crf01-server”
10 ignore tcp 10.1.10.10 0.0.0.0 destionation-port eq 1812
exit
vlan 10
name “VLAN10”
untagged A1-A4
ip helper-address 10.1.10.10
ip address 10.1.10.1 255.255.255.0
ip access-group “crf01-server” connection-rate-filter
exit

One Comment on “how can the network administrator ensure that this traffic is never blocked while leaving the current protecti


Leave a Reply