Match each port security violation mode on the left with its corresponding switch behavior when an unauthorized MAC address is detected on an interface.
- Protect ModeSilently drops traffic from unknown MAC addresses without incrementing the security violation counter or sending a Syslog message.
- Restrict ModeDrops traffic from unknown MAC addresses, increments the security violation counter, and generates a Syslog notification.
- Shutdown ModeDrops all traffic, immediately places the port into the err-disabled state, turns off the port LED, and generates a Syslog message.
Cevap
Protect mode matches silent packet dropping without counters; Restrict mode matches packet dropping with violation counter increments and Syslog notifications; Shutdown mode matches error-disabling the port and generating notifications.
Each violation mode dictates how Cisco IOS handles unauthorized frames on a secured port. Protect silently drops unauthorized traffic; Restrict drops unauthorized traffic while logging and counting violations; Shutdown disables the entire port by placing it into the err-disabled state.
Adım Adım Çözüm
Anahtar Kavram
Port Security Violation Modes (Protect, Restrict, Shutdown)