Which configuration restricts the amount of SSH that a router accepts 100 kbps?

Which configuration restricts the amount of SSH that a router accepts 100 kbps?

A . Option A
B . Option B
C . Option C
D . Option D

View Answer

Answer: C

Explanation:

The correct configuration to restrict the amount of SSH traffic that a router accepts to 100 kbps involves creating a policy map that specifies the maximum bandwidth for the class of traffic. This is done by defining a class map to match the SSH traffic, then creating a policy map that uses the police command to set the rate limit. The policy map is then applied to the control plane to enforce the limit on SSH traffic.

References: The information is based on the Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) source book

CoPP protects the route processor on network devices by treating route processor resources as a separate entity with its own ingress interface (and in some implementations, egress also).

CoPP is used to police traffic that is destined to the route processor of the router such as:

+ routing protocols like OSPF, EIGRP, or BGP.

+ Gateway redundancy protocols like HSRP, VRRP, or GLBP.

+ Network management protocols like telnet, SSH, SNMP, or RADIUS.

Therefore we must apply the CoPP to deal with SSH because it is in the management plane. CoPP must be put under “control-plane” command.