問題文
A branch device keeps four ports as Layer 2 interfaces for a server segment and two ports as Layer 3 interfaces for its WAN links, with a separate security zone for each side. The operator now wants the servers to reach the WAN through the same device. Which statement describes what this configuration can enforce?
選択肢
- The irb unit routes between the bridged segment and the routed ports as soon as it is placed in the same zone as the WAN ports, because the zone then covers both sides of the boundary with one intrazone rule.
- One zone can hold the bridged ports and the routed ports together and the irb unit inherits that zone, so a single intrazone policy covers the server traffic without any change on the neighboring devices.
- Policies can be written between two Layer 2 zones or between two Layer 3 zones, and traffic never crosses from the bridged ports to the routed ports through the irb unit so a neighboring router has to join the two halves.
- A policy from the Layer 2 zone to the Layer 3 zone forwards the server traffic as soon as the irb unit and the routed port are placed in one routing instance, because the shared instance gives them one forwarding table for the Layer 2 and the Layer 3 ports.