变形题
在 MSR 路由器配置命令如下 : acl number 2000Rule 0 permit source 192.168.0.0 0.0.0.255Acl number 2002
Rule 0 permit source 192.168.2.00.0.0.255 #Traffic classifier 2 operator and if-match acl 2002Traffic classifier 1 operator and if-match acl 2000#
Traffic behavior 2
Queue af bandwidth 3000 traffic behavior 1Queue ef bandwidth 3000 cbs 75000#Qos polic test classifier 1 behavior 1Classifier 2 behavior 2 #
Interface GigabitEthernet0/1 port link-mode route duplex fullSpeed 10
Qos max-bandwidth 500000
Lp address 192.168.1.1 255.255.255.0Qos appl polic test outbound
当源地址分别为 192.168.0.2 、 192.168.2.2 、 192.168.3.2 的报文流量速率分别为 4Mbps 、 4Mbps 、 10Mbps ,无其它背景流量,从端口 G0/1 向外转发时。则以下说法正确的是（)

层次化网络模型的优点包括。（选择一项或多项)

两台安全网关的配置分别为:
RTA
[RTA] ike peer 123
[RTA-ike-peer-123] pre-shared-ke simple 123
[RTA-ike-peer-123] remote-address 10.2.1.2
[RTA-ike-peer-123] local-address 10.2.1.1
[RTA-ike-peer-123] quit
[RTA] ipsec proposal 1
[RTA-ipsec-proposal-1] quit
[RTA] acl number 3000
[RTA-acl-adv-3000] rule 0 permit ip source 10.1.1.0 0.255.255.255
[RTA] ipsec polic 1 1 isakmp
[RTA-ipsec-polic-isakmp-1-1] securit acl 3000
[RTA-ipsec-polic-isakmp-1-1] ike-peer 123
[RTA-ipsec-polic-isakmp-1-1] proposal 1
[RTA-ipsec-polic-isakmp-1-1] quit
[RTA] interface Ethernet 0/1/0
[RTA-Serial0/2/1] ip address 10.2.1.1 255.255.255.0
[RTA] interface Serial 0/2/1
[RTA-Serial0/2/1] ip address 10.2.1.1 255.255.255.0
[RTA-Serial0/2/1] ipsec polic 1
RTB :
[RTB] ike peer 123
[RTB-ike-peer-123] pre-shared-ke simple 123
[RTB-ike-peer-123] remote-address 10.2.1.1
[RTB-ike-peer-123] local-address 10.2.1.2
[RTB-ike-peer-123] quit
[RTB] ipsec proposal 1
[RTB-ipsec-proposal-1] quit
[RTB] acl number 3000
[RTB-acl-adv-3000] rule 0 permit ip source 10.3.1.0 0.255.255.255
[RTB] ipsec polic 1 1 isakmp
[RTB-ipsec-polic-isakmp-1-1] securit acl 3000
[RTB-ipsec-polic-isakmp-1-1] ike-peer 123
[RTB-ipsec-polic-isakmp-1-1] proposal 1
[RTB-ipsec-polic-isakmp-1-1] quit
[RTA] interface Ethernet 0/1/0
[RTA-Serial0/2/1] ip address 10.3.1.1 255.255.255.0
[RTB] interface Serial0/2/1
[RTB-Serial0/2/1] ip address 10.2.1.2 255.255.255.0
[RTB-Serial0/2/1] ipsec polic 1
由此可知。

在 L2TP VPN 中, LAC （ LATP Access Concentrator , L2TP 访问集中器)接收到从远程系统向服务器方发送的 IP 数据包,需要对数据包进行相应的封装后发给 LNS （ L2TP Network Server , L2TP 网络服务器), LAC 和 LNS 间传送的数据包的封装格式为

在防火墙的（)视图,可以使用 reboot 命令对防火墙进行重启操作。