Jeremy's IT Lab CCNA Port Security Day 49
Call Kai
Learn
Practice Test
Spaced Repetition
Match
Flashcards
Knowt Play1/33
There's no tags or description
Looks like no tags are added yet.
Name | Mastery | Learn | Test | Matching | Spaced | Call with Kai | Chat |
|---|
No analytics yet
Send a link to your students to track their progress
34 Terms
A combination of statically-configured and dynamically-learned secure MAC addresses [can/can't] exist on a switchport.
can
Configure the errdisable recovery interval:
SW1(config)# [...]
errdisable recovery interval seconds
Configure the port security aging time:
SW1(config-if)# [...]
switchport port-security aging time minutes
Configure the port security aging type:
SW1(config-if)# [...]
switchport port-security aging type {absolute | inactivity}
Configure the port security violation mode:
SW1(config-if)# [...]
switchport port-security violation {shutdown | restrict | protect}
Enable aging of static secure MAC addresses
SW1(config-if)# [...]
switchport port-security aging static
Enable errdisable recovery for port security violations:
SW1(config)# [...]
errdisable recovery cause psecure-violation
Enable port security on an interface:
SW1(config-if)# [...]
switchport port-security
Enable sticky secure MAC address learning:
SW1(config-if)# [...]
switchport port-security mac-address sticky
Errdisable recovery is [enabled/disabled] by default for all causes.
disabled
Manually configure a secure MAC address on the interface.
SW1(config-if)# [...]
switchport port-security mac-address mac-address
Manually re-enable an interface disabled by port security:
SW1(config-if)# [...]
SW1(config-if)# [...]
shutdown
no shutdown
Port security [can/can't] be enabled on an interface configured as switchport mode access
can
Port security [can/can't] be enabled on an interface configured as switchport mode dynamic auto
can't
Port security [can/can't] be enabled on an interface configured as switchport mode dynamic desirable
can't
Port security [can/can't] be enabled on an interface configured as switchport mode trunk
can
Port security protect violation mode:
Syslog/SNMP messages [are/aren't] generated.
aren't
Port security protect violation mode:
The interface [is/isn't] disabled.
isn't
Port security protect violation mode:
The violation counter [is/isn't] incremented.
isn't
Port security restrict violation mode:
Syslog/SNMP messages [are/aren't] generated.
are
Port security restrict violation mode:
The interface [is/isn't] disabled.
isn't
Port security restrict violation mode:
The violation counter [is/isn't] incremented.
is
Port security secure static address aging is [enabled/disabled] by default.
disabled
Port security shutdown violation mode:
Syslog/SNMP messages [are/aren't] generated.
are
Port security shutdown violation mode:
The interface [is/isn't] disabled.
is
Port security shutdown violation mode:
The violation counter [is/isn't] incremented.
is
Show a summary of errdisable recovery information:
SW1# [...]
show errdisable recovery
Show a summary of port security-enabled switchports
SW1# [...]
show port-security
Show all secure MAC addresses on the switch:
SW1# [...]
show mac address-table secure
Show port security information for an individual switchport
SW1# [...]
show port-security interface interface
The default errdisable recovery timer is [...]
300 seconds (5 minutes)
The default port security aging type is [...].
absolute
What is the default port security violation mode?
Shutdown
When an interface is shutdown by port security, its status in the output of show interfaces status will be [...]
err-disabled