Huawei Certified ICT Associate – Data Center Network (HCIA-DCN) — Question 103

Which of the following statements is true after the ACL shown in the figure is configured on RTA?

[RTA]acl 2001
[RTA-acl-basic-2001]rule 20 permit source 20.1.1.0 0.0.0.255
[RTA-acl-basic-2001]rule 10 deny source 20.1.1.0 0.0.0.255

Answer options

• A. The configuration is incorrect because the sequence numbers of rules must be configured in ascending order.
• B. VRP does not adjust the sequence numbers of rules, but first matches packets against the rule "permit source 20.1.1.0 0.0.0.255".
• C. VRP matches packets against the rule "deny source 20.1.1.0 0.0.0.255" first according to the rule sequence number.
• D. Versatile Routing Platform (VRP) adjusts the sequence number of the first rule to 5 according to the configuration sequence.

Correct answer: B

Explanation

The correct answer is B because the VRP processes each packet starting from the top-most rule and matches it with the first applicable rule, which in this case is the permit rule. Option A is incorrect since the sequence numbers can be configured in any order. Options C and D are incorrect as they misrepresent how VRP processes ACL rules and the adjustment of sequence numbers.