300-615 DCIT: Troubleshooting Cisco Data Center Infrastructure

By Cisco · Question Mode

QuestionQ53

Network

Question Image

Refer to the exhibit. An engineer must strictly enforce the port-security configuration database in the Fibre Channel fabric. A new device has been connected to the Fibre Channel storage interface that is configured for port security. Port security was enabled for the VSAN to which the port belongs. Despite this configuration, rogue devices can log in to the fabric. Which action resolves the issue?

Explanation

Cisco MDS port security enables auto-learning by default upon activation. With auto-learning enabled, devices that connect later can be learned and allowed even when no port access was configured for them. Disabling auto-learning for VSAN 1 stops new devices from being dynamically admitted, so authorization is enforced from the established port-security database.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!