单项选择题
在一台Cisco路由器的g3/1接口,封禁ICMP协议,只允许转发168.105.129.0/24子网的ICMP数据包,正确的访问控制列表的配置是______。
A.Router(config)#interface g3/1Router(config-if)#ip access-group 198 inRouter(config-if)#ip access-group 198 outRouter(config-if)#exitRouter(config)#access-list 198 permit icmp 168.105.129.0 0.0.0.255 anyRouter(config)#access-list 198 deny icmp any anyRouter(config)#access-list 198 permit ip any any
B.Router(config)#access-list 2000 permit icmp 168.105.129.0 0.0.0.255 anyRouter(config)#access-list 2000 deny icmp any anyRouter(config)#access-list 2000 permit ip any anyRouter(config)#interface g3/1Router(config-if)#ip access-group 2000 inRouter(config-if)#ip access-group 2000 outRouter(config-if)#exit
C.Router(config)#access-list 198 deny icmp any anyRouter(config)#access-list 198 permit icmp 168.105.129.0 0.0.0.255 anyRouter(config)#access-list 198 permit ip any anyRouter(config)#interface g3/1Router(config-if)#ip access-group 198 outRouter(config-if)#exit
D.Router(config)#access-list 100 permit icmp 168.105.129.0 0.0.0.255 anyRouter(config)#access-list 100 permit ip any anyRouter(config)#access-list 100 deny icmp any anyRouter(config)#interface g3/1Router(config-if)#ip access-group 100 inRouter(config-if)#exit