You are an ISP. Your backbone IP address space is 10.10.0.0/16. Your network management IP address space is 192.168.100.0/24. A firewall filter is applied to lo0 which allows management access using Telnet and FTP. Which firewall filter will also allow OSPF and BGP to function without blocking management access ?
A.
[edit firewall family inet]
user@r2# show
filter management-access {
term allow_telnet_ftp {
from {
source-address {
192.168.100.0/24;
}
protocol tcp;
destination-port [ telnet ftp ];
}
then accept;
}
B.
[edit firewall family inet]
user@r2# show
filter management-access {
term allow_telnet_ftp {
from {
source-address {
192.168.100.0/24;
}
then accept;
}
C.
[edit firewall family inet]
user@r2# show
filter management-access {
term allow_telnet_ftp {
from {
source-address {
192.168.100.0/24;
}
destination-port [ telnet ftp ];
}
then accept;
}
term 2 {
from {
source-address {
10.10.0.0/16;
}
then accept;
}
D.
[edit firewall family inet]
user@r2# show
filter management-access {
term allow_telnet_ftp {
from {
source-address {
192.168.100.0/24;
10.10.0.0/16;
}
destination-port [ telnet ftp ];
}
then accept;
}
term 2 {
then {
discard;
}
} }