Home » Cisco » 300-206 » What commands you can configure unified access-list on ASA CLI?
With what commands you can configure unified access-list on ASA CLI? (Choose two)
A. access-list
B. ipv6 access-list
C. ipv6 access-list website
D. object-group network
E. object network
Correct Answer: AD
Explanation/Reference:
Explanation:
ACLs now support IPv4 and IPv6 addresses. You can even specify a mix of IPv4 and IPv6 addresses for the source and destination. The any keyword was changed to represent IPv4 and IPv6 traffic. The any4 and any6 keywords were added to represent IPv4-only and IPv6-only traffic, respectively. The IPv6-specific ACLs are deprecated. Existing IPv6 ; are migrated to extended ACLs. See the release notes for more information about migration.
We modified the following commands: access-list extended , access-list webtype.
We removed the following commands: ipv6 access-list, ipv6 access-list webtype, ipv6-vpn-filter. Network object groups can contain multiple network objects as well as inline networks. Network object groups can support a mix of both IPv4 and IPv6 addresses.
You cannot use a mixed IPv4 and IPv6 object group for NAT, or object groups that include FQDN objects.
