Which command sequence correctly applies the MAC-Based ACE Table to VTY lines 0-4?

Which command sequence correctly applies the MAC-Based ACE Table to VTY lines 0-4?

• A. access-class 5 in
• B. line vty 0 4; access-class 5 in
• C. apply access-list 5 in to VTY lines
• D. interface VTY 0-4; set access-class 5 in

Answer: (B)

Binding an access control list to the VTY lines is how you control who can initiate remote management sessions. The MAC-Based ACE Table is represented as an ACL, so you apply that ACL to the VTY lines to filter incoming connection attempts. You must first enter the VTY line configuration for the range you want to protect, then attach the ACL with the appropriate direction. In this case, you would configure line vty 0 4 to cover the five VTY lines used for Telnet/SSH, and then apply the ACL inbound with access-class 5 in. This binds the MAC-based ACE Table (ACL number 5) to inbound traffic on those VTY lines, making it effective for remote access attempts. Why the other approaches don’t fit: applying a command without selecting the specific VTY lines leaves the scope undefined, and using a different syntax like apply access-list or set on an interface VTY is not valid in IOS. The correct sequence is to enter the VTY line range, then attach the ACL with the proper access-class command in the inbound direction.

Binding an access control list to the VTY lines is how you control who can initiate remote management sessions. The MAC-Based ACE Table is represented as an ACL, so you apply that ACL to the VTY lines to filter incoming connection attempts. You must first enter the VTY line configuration for the range you want to protect, then attach the ACL with the appropriate direction. In this case, you would configure line vty 0 4 to cover the five VTY lines used for Telnet/SSH, and then apply the ACL inbound with access-class 5 in. This binds the MAC-based ACE Table (ACL number 5) to inbound traffic on those VTY lines, making it effective for remote access attempts.

Why the other approaches don’t fit: applying a command without selecting the specific VTY lines leaves the scope undefined, and using a different syntax like apply access-list or set on an interface VTY is not valid in IOS. The correct sequence is to enter the VTY line range, then attach the ACL with the proper access-class command in the inbound direction.