Soru

Zorluk: KolayLayer 2 Security Features (Port Security, DHCP Snooping, DAI)

An administrator enables port security on a Cisco switch interface using default settings without specifying a violation mode. What default action will the switch take if an unauthorized device connects to this interface?

  1. A
    It drops traffic from the unauthorized MAC address, increments the security violation counter, and sends a Syslog alert while keeping the interface up.
  2. It immediately shuts down the interface, places it into an err-disabled state, and turns off the port LED.Cevap
  3. C
    It silently drops packets from the unknown source MAC address without altering the port status or incrementing any counters.
  4. D
    It forwards the frame normally but restricts all subsequent broadcast traffic from passing through the interface.

Cevap

The switch immediately shuts down the interface, places it into an err-disabled state, and turns off the port LED.
When port security is enabled on a Cisco switch interface, the default violation mode is shutdown. When an unauthorized MAC address triggers a violation, the interface is immediately placed in an err-disabled state, disabling all traffic through the port until manually re-enabled or automatically recovered.

Adım Adım Çözüm

1
Identify the default violation mode for Cisco port security.
The default violation mode is shutdown.
When port-security is enabled without specifying a violation action using `switchport port-security violation`, the switch defaults to `shutdown`.
2
Determine the switch reaction when a violation occurs under shutdown mode.
The port transitions to the err-disabled state and stops forwarding all traffic.
Shutdown mode disables the interface entirely, turns off the link LED, increments the violation counter, and generates a syslog message.

Anahtar Kavram

Port Security Default Violation Mode
Bu soruyu puanla