A county courts edge router should accept management protocols only from the jump-host subnet as defense in depth. What ACL pattern best supports that goal?
Select an answer to reveal the explanation.
Short Explanation
Think of an infrastructure ACL as a velvet rope at the router’s management door—jump hosts get in; random Internet scanners hear ‘no.’ Transit traffic can still pass while admin planes stay fenced.
Full Explanation
Infrastructure ACLs (iACLs) restrict traffic destined to the device’s management and often control-plane addresses, allowing protocols such as SSH or SNMP only from approved management networks. They complement AAA and CoPP as defense in depth. Open VTYs, Internet-wide management permit, or L2 port security on WAN Ethernet do not implement that IPv4 management filter pattern.