Networking - Spanning Tree Protocol - Discussion

Discussion Forum : Spanning Tree Protocol - Spanning Tree Protocol (Q.No. 12)
12.
You need to allow one host to be permitted to attach dynamically to each switch interface. Which two commands must you configure on your catalyst switch to meet this policy?
  1. Switch(config-if)# ip access-group 10
  2. Switch(config-if)# switchport port-security maximum 1
  3. Switch(config)# access-list 10 permit ip host 1
  4. Switch(config-if)# switchport port-security violation shutdown
  5. Switch(config)# mac-address-table secure
1 and 3
2 and 4
2, 3 and 5
4 and 5
Answer: Option
Explanation:
The switchport port-security is an important command, and it's super easy with the CNA; however, from the CLI, you can set the maximum number of MAC addresses allowed into the port, and then set the penalty if this maximum has been passed.
Discussion:
1 comments Page 1 of 1.

Hussam Ali said:   9 years ago
Hello, As I understand from the question, the host have to be dynamically attached to switch interface (no MAC address filter/specifying).

Shouldn't we use "switchport port-security mac-address sticky " interface subcommand instead of " switchport port-security violation shutdown" to achieve this requirement.

Post your comments here:

Your comments will be displayed after verification.