| Exam 300-101 | Question id=430 | Infrastructure Security |
Which traffic does the following configuration allow?
permit ipv6 host 2001:DB8:0:4::32 any eq ssh
line vty 0 4
ipv6 access-class cisco in
| A. |
all traffic to vty 0 4 from source 2001:DB8:0:4::32 | |
| B. |
only ssh traffic to vty 0 4 from source all | |
| C. |
only ssh traffic to vty 0 4 from source 2001:DB8:0:4::32 | |
| D. |
all traffic to vty 0 4 from source all |
Here we see that the Ipv6 access list called “cisco” is being applied to incoming VTY connections to the router. Ipv6 access list has just one entry, which allows only the single Ipv6 IP address of 2001:DB8:0:4::32 to connect using SSH only.