300-440 Question 222
Select 2You are tasked with implementing an IPv6 traffic filter on a router to prevent traffic from a specific IPv6 subnet (2001:db8:1::/64) from reaching a particular interface (GigabitEthernet0/1). Which of the following configurations should you apply to achieve this?
- A
Create an IPv6 ACL to deny traffic from 2001:db8:1::/64, apply it inbound on the GigabitEthernet0/1 interface.
- B
Create an IPv6 ACL to deny traffic from 2001:db8:1::/64, apply it outbound on the GigabitEthernet0/1 interface.
- C
Create an IPv6 ACL to permit all traffic except traffic from 2001:db8:1::/64, apply it inbound on the GigabitEthernet0/1 interface.
- D
Create an IPv6 ACL to permit all traffic except traffic from 2001:db8:1::/64, apply it outbound on the GigabitEthernet0/1 interface.
- E
No configuration is required, as IPv6 traffic filtering is enabled by default.
Show answer and explanation
Correct answers: A, C
Explanation
To filter IPv6 traffic from a specific subnet, an IPv6 ACL must be created with a deny statement for the subnet and applied to the appropriate interface. Applying the ACL inbound ensures the traffic is blocked before entering the router, which is more efficient than applying it outbound. IPv6 traffic filtering requires explicit configuration and is not enabled by default.
- A. Correct.
This is a valid configuration. Applying an IPv6 ACL with a deny statement for the specified subnet and applying it inbound on the interface ensures the traffic is blocked as it enters the interface.
- B. Incorrect.
While this configuration would block the traffic, applying the ACL outbound is not the most efficient method in this scenario as the traffic would still traverse the router before being filtered.
- C. Correct.
This configuration is valid because it explicitly permits all other traffic while denying traffic from 2001:db8:1::/64, ensuring only the specified traffic is blocked. Applying it inbound ensures the traffic is filtered before entering the router.
- D. Incorrect.
Similar to Option 2, applying the ACL outbound is less efficient as it allows the traffic to traverse the router before being filtered.
- E. Incorrect.
IPv6 traffic filtering is not enabled by default. Explicit ACL configurations are needed to filter IPv6 traffic.