Cisco CCNP Service Provider 350-501 Question # 50 Topic 6 Discussion

 To achieve this, we need to apply an access control list (ACL) on PE-R9 that permits SSH traffic from the management network 192.168.0.0/16 while denying other traffic. The correct ACL configuration is as follows:

access-list 100 permit tcp 192.168.0.0 0.0.255.255 any eq 22

access-list 100 deny ip any any

The first line permits TCP traffic from the management network to any destination with destination port 22 (SSH).

The second line denies all other IP traffic.

References:

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) v1.0 course materials.

Cisco Learning Network: SPCOR Training Videos

Cisco Learning Network: Service Provider Training