813题库_99题疑问

fjcf120146

这题答案B为什么是对的，bridged acl 是否是mac access-list。如果是，我在真机上测试，在二层物理口只能支持input方向，SVI口泽不能调用mac access-list




二层物理口上只支持input
C3560(config)#interface fastEthernet 0/10
C3560(config-if)#mac ?
  access-group  MAC access-group configuration commands

C3560(config-if)#mac access-group ?
  WORD  ACL name

C3560(config-if)#mac access-group mac-acl ?
  in  Apply to Ingress

C3560(config-if)#mac access-group mac-acl in
C3560(config-if)#mac access-group mac-acl in ?
  <cr>
C3560(config-if)#





SVI口上不支持应用mac access-lit
C3560(config)#interface vlan 10
C3560(config-if)#ma?
macro  max-reserved-bandwidth  
C3560(config-if)#ma
C3560(config-if)#mac ?
% Unrecognized command
C3560(config-if)#mac

rogerxyz

"bridge acl" means VACL(vlan access-map),"Router ACLs" is RACL refer to access-list.
Hope this can help you.

fjcf120146

rogerxyz 发表于 2012-1-12 10:49
"bridge acl" means VACL(vlan access-map),"Router ACLs" is RACL refer to access-list.
Hope this can  ...

从题目最后两个选项，提及vlan maps，bridged acl应该不是指vacl吧，如果是几个选项的叫法应该一致？
并且vacl是可包含二层、三层条件的，注释中也指出bridged acl为二层。

rogerxyz

http://www.cisco.com/en/US/docs/ ... idge.html#wp1174530

You are right!
bridge acl not means for "vlan access-map".

兲笙吥丶倫尐