The following commands are issued on a Cisco Router:
Router(configuration)#access-list 199 permit tcp host 10.1.1.1 host 172.16.1.1
Router(configuration)#access-list 199 permit tcp host 172.16.1.1 host 10.1.1.1
Router(configuration)#exit
Router#debug ip packet 199
What will the debug output on the console show?
A.
All IP packets passing through the router
B.
Only IP packets with the source address of 10.1.1.1
C.
All IP packets from 10.1.1.1 to 172.16.1.1
D.
All IP Packets between 10.1.1.1 and 172.16.1.1
Explanation:
In this example, the “debug ip packet” command is tied to access list 199, specifying which IP
packets should be debugged. Access list 199 contains two lines, one going from the host with IP
address 10.1.1.1 to 172.16.1.1 and the other specifying all TCP packets from host 172.16.1.1 to
10.1.1.1.
Incorrect Answers:
: Only the packets specified in access list 199 will be debugged, not all packets.
: Access list 199 is an extended access list, which specifies that both the source and destination IP
addresses must match. In this case, it is all TCP traffic to and from 10.1.1.1 to 172.16.1.1.
: There are two separate lines in access list 199, the first does indeed match all TCP packets from
10.1.1.1 to 172.16.1.1, but the second line also include traffic the other way, from 172.16.1.1 to
10.1.1.1.