单项选择题
在一台Cisco路由器的g3/1端口封禁ICMP协议,只允许137.189.11.0/24和211.68.69.0/26子网的ICMP数据包通过路由器,正确的access-list配置是( )。
A.Router(config)#access-list 98 permit icmp 137.189.11.0 0.0.0.255 any Router(config)#access-list 98 permit icmp 211.68.69.0 0.0.0.63 any Router(config)#access-list 98 deny icmp any any Router(config)#access-list 98 permit ip any any Router(config)#interface g3/1 Router(config-if)#ip access-group 98 in Router(config-if)#ip access-group 98 out
B.Router(cortfig)#access-list 198 permit icmp 137.189.11.0 0.0.0.255 any Router(config)#access-list 198 permit icmp 211.68.69.0 0.0.0.192 any Router(config)#access-list 198 deny icmp any any Router(config)#access-list 198 permit ip any any Router(config)#interface g3/1 Router(eonfig-if)#ip access-group 198 in Router(config-if)#ip access-group 198 out
C.Router(config)#access-list 999 permit icmp 137.189.11.0 0.0.0.255 any Router(config)#access-list 999 permit icmp 211.68.69.0 0.0.0.63 any Router(config)#access-list 999 permit ip any any Router(config)#access-list 999 deny icmp any any Router(config)#interface g3/1 Router(config-if)#ip access-group 999 in Router(config-if)#ip access-group 999 out
D.Router(cortfig)#access-list 199 permit icmp 137.189.11.0 0.0.0.255any Router(config)#access-list 199 permit icmp 211.68.69.0 0.0.0.63any Router(config)#access-list 199 deny icmp any any Router(corffig)#access-list 199 permit ip any any Router(config)#interface g3/1 Router(config-if)#ip access-group 199 in Router(config-if)#ip access-group 199 out