QuestionQ153

Security Fundamentals

An engineer must configure a switch with port security so that devices forwarding unicasts, multicasts, and broadcasts cannot flood the port. The port must allow only two random MAC addresses at one time.

Drag and drop the required configuration commands into the correct order. Not all commands are used.

Drag & Drop
switchport mode access
switchport port-security
switchport port-security mac-address 0060.3EDD.77AB
switchport port-security mac-address 00D0.D3ED.622A
switchport port-security mac-address sticky
switchport port-security maximum 2
switchport port-security violation shutdown
1
2
3
4
Explanation

Port security can be configured only after the interface is set to a valid switchport mode such as access. Enabling switchport port-security turns on secure MAC enforcement for the port. switchport port-security maximum 2 limits the port to two secure MAC addresses. Because the requirement is for two random MAC addresses rather than two specific manually entered addresses, switchport port-security mac-address sticky is the correct choice: it learns the MAC addresses dynamically and converts them to sticky secure addresses. The explicit violation shutdown command is unnecessary here because shutdown is the default violation action on Cisco port-security interfaces.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!