Soru

Zorluk: KolayLayer 2 Security Features (Port Security, DHCP Snooping, DAI)

Match each port security violation mode on the left with its corresponding switch behavior when an unauthorized MAC address is detected on an interface.

  • Protect ModeSilently drops traffic from unknown MAC addresses without incrementing the security violation counter or sending a Syslog message.
  • Restrict ModeDrops traffic from unknown MAC addresses, increments the security violation counter, and generates a Syslog notification.
  • Shutdown ModeDrops all traffic, immediately places the port into the err-disabled state, turns off the port LED, and generates a Syslog message.

Cevap

Protect mode matches silent packet dropping without counters; Restrict mode matches packet dropping with violation counter increments and Syslog notifications; Shutdown mode matches error-disabling the port and generating notifications.
Each violation mode dictates how Cisco IOS handles unauthorized frames on a secured port. Protect silently drops unauthorized traffic; Restrict drops unauthorized traffic while logging and counting violations; Shutdown disables the entire port by placing it into the err-disabled state.

Adım Adım Çözüm

1
Identify the behavior of Protect mode.
Protect mode drops frames from unauthorized MAC addresses without logging or updating counters.
Protect is designed for silent dropping of unauthorized frames.
2
Identify the behavior of Restrict mode.
Restrict mode drops frames from unauthorized MAC addresses while actively logging Syslog alerts and incrementing violation counters.
Restrict mode alerts administrators while leaving the interface active for authorized traffic.
3
Identify the behavior of Shutdown mode.
Shutdown mode disables the port entirely, transitioning it to the err-disabled state upon a violation.
Shutdown is the most restrictive default mode in Cisco IOS port security.

Anahtar Kavram

Port Security Violation Modes (Protect, Restrict, Shutdown)
Bu soruyu puanla