VPN users cannot access the active FTP server through the router but can access any server in the data center.
Additional network information:
DMZ network C 192.168.5.0/24 (FTP server is 192.168.5.11)
VPN network C 192.168.1.0/24
Datacenter C 192.168.2.0/24
User network – 192.168.3.0/24
HR network C 192.168.4.0/24
Traffic shaper configuration:
VLAN Bandwidth Limit (Mbps)
VPN 50
User 175
HR 250
Finance 250
Guest 0
Router ACL:
Action Source Destination
Permit 192.168.1.0/24 192.168.2.0/24
Permit 192.168.1.0/24 192.168.3.0/24
Permit 192.168.1.0/24 192.168.5.0/24
Permit 192.168.2.0/24 192.168.1.0/24
Permit 192.168.3.0/24 192.168.1.0/24
Permit 192.168.5.1/32 192.168.1.0/24
Deny 192.168.4.0/24 192.168.1.0/24
Deny 192.168.1.0/24 192.168.4.0/24
Deny any any
Which of the following solutions would allow the users to access the active FTP server?
A . Add a permit statement to allow traffic from 192.168.5.0/24 to the VPN network
B . Add a permit statement to allow traffic to 192.168.5.1 from the VPN network
C . IPS is blocking traffic and needs to be reconfigured
D . Configure the traffic shaper to limit DMZ traffic
E . Increase bandwidth limit on the VPN network
Answer: A
Leave a Reply