单项选择题
在一台Cisco路由器的g0/3端口上封禁ICMP协议,只允许222.29.86.0/24和202.38.97.128/26子网的ICMP数据包通过路由器,正确的access-list配置是( )。
A.Router(config)#access-list 98 permit icmp 222.29.86.0 0.0.0.255 any Router(config)#access-list 98 permit icmp 202.38.97.128 0.0.0.63 any Router(config)#access-list 98 deny icmp any any Router(config)#access-list 98 permit ip any any Router(config)#interface g0/3 Router(config-if)#ip access-group 98 in Router(config-if)#ip access-group 98 out
B.Router(config)#access-list 198 permit icmp 222.29.86.0 255.255.255.0 any Router(config)#access-list 198 permit icmp 202.38.97.128 255.255.255.192 any Router(config)#access-list 198 deny icmp any any Router(config)#access-list 198 permit ip any any Router(config)#interface g0/3 Router(config-if)#ip access-group 198 in Router(config-if)#ip access-group 198 out
C.Router(config)#access-list 100 permit ip any any Router(config)#access-list 100 permit icmp 222.29.86.0 0.0.0.255 any Router(config)#access-list 100 permit icmp 202.38.97.128 0.0.0.63 any Router(config)#access-list 100 deny icmp any any Router(config)#interface g0/3 Router(config-if)#ip access-group 100 in Router(config-if)#ip access-group 100 out
D.Router(config)#access-list 100 permit icmp 222.29.86.0 0.0.0.255 any Router(config)#access-list 100 permit icmp 202.38.97.128 0.0.0.63 any Router(config)#access-list 100 deny icmp any any Router(config)#access-list 100 permit ip any any Router(config)#interface g0/3 Router(config-if)#ip access-group 100 in Router(config-if)#ip access-group 100 out