What is true about access control on bridged and routed VLAN traffic? (Select three)
A.
Router ACLs can be applied to the input and output directions of a VLAN interface.
B.
Bridged ACLs can be applied to the input and output directions of a VLAN interface.
C.
Only router ACLs can be applied to a VLAN interface.
D.
VLAN maps and router ACLs can be used in combination.
E.
VLAN maps can be applied to a VLAN interface
Explanation:
Router ACLs are applied on interfaces as either inbound or outbound.
To filter both bridged and routed traffic, VLAN maps can be used by themselves or in
conjunction with router ACLs.
VLAN ACLs, also called VLAN maps, which filter both bridged and routed packets. VLAN
maps can be used to filter packets exchanged between devices in the same VLAN.
Is this correct? Aren`t the VLAN maps and Bridge ACLs the same thing? How come B is true?
A,C,D – unless somebody proves otherwise
A, C, E are correct
Bridged ACL (or VLAN Access-list, or VLAN map) is used to filter traffic that is flowing within a VLAN. It can only be applied to a VLAN, not interface -> C is correct.
An Interface VLAN (or Switch Virtual Interface – SVI) is very similar to a physical interface on a router, although it is a virtual interface only. We can apply Router ACL to the inbound and outbound direction of a VLAN interface -> A is correct.
To apply access control to both bridged and routed traffic, you can use VACLs alone or a combination of VACLs and ACLs. You can define ACLs on the VLAN interfaces to apply access control to both the ingress and egress routed traffic. You can define a VACL to apply access control to the bridged traffic. -> E is correct.