HP Aruba Certified Professional - Campus Access HPE7-A01 Question # 24 Topic 3 Discussion
HPE7-A01 Exam Topic 3 Question 24 Discussion:
Question #: 24
Topic #: 3
In AOS 10. which session-based ACL below will only allow ping from any wired station to wireless clients but will not allow ping from wireless clients to wired stations"? The wired host ingress traffic arrives on a trusted port.
A.
ip access-list session pingFromWired any user any permit
B.
ip access-list session pingFromWired user any svc-icmp deny any any svc-icmp permit
C.
ip access-list session pingFromWired any any svc-icmp permit user any svc-icmp deny
D.
ip access-list session pingFromWired any any svc-icmp deny any user svc-icmp permit
A session-based ACL is applied to traffic entering or leaving a port or VLAN based on the direction of the session initiation. To allow ping from any wired station to wireless clients but not vice versa, a session-based ACL should be used to deny icmp echo traffic from any source to any destination, and then permit icmp echo-reply traffic from any source to user destination. The user role represents wireless clients in AOS 10. References: https://techhub.hpe.com/eginfolib/Aruba/OS-CX_10.04/5200-6692/GUID-BD3E0A5F-FE4C-4B9B-BE1D-FE7D2B9F8C3A.html https://techhub.hpe.com/eginfolib/networking/docs/arubaos-switch/security/GUID-EA0A5B3C-FE4C-4B9B-BE1D-FE7D2B9F8C3A.html
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit