Term
Switching
For the switch to act as a DHCP client? |
|
Definition
Step 1.
|
Enter VLAN 1 configuration mode using the interface vlan 1 global configuration command (from any config mode).
|
Step 2.
|
Use the ip address dhcp command, instead of the ip address ip-address mask command, on the VLAN 1 interface.
|
Step 3.
|
Enable the VLAN 1 interface using the no shutdown interface subcommand
|
Step 4.
|
Do not configure the ip default-gateway global command
|
|
|
|
Term
Switching
For a statically configured IP, can check it by issuing the show run
How would an IP configured by DHCP be checked? |
|
Definition
|
|
Term
Switching
Important details for IP addresses when using the
show interface vlan 1 command |
|
Definition
- lists the interface status of the VLAN 1 interface
- output mentions that the address is either statically configured or DHCP-leased.
|
|
|
Term
Switching
What does the - a stand for in the results of
show interfaces status |
|
Definition
|
|
Term
Switching
Port security configuration flow: |
|
Definition
-Make the port an access port, which means that the port is not doing any VLAN trunking.
-Enable port security and then configure the actual MAC addresses of the devices allowed to use that port |
|
|
Term
Switching
The actual steps to configure port security on a switch
Up to 5 steps |
|
Definition
Step 1.
|
Make the switch interface an access interface using the switchport mode access interface subcommand.
|
Step 2.
|
Enable port security using the switchport port-security interface subcommand.
|
Step 3.
|
(Optional) Specify the maximum number of allowed MAC addresses associated with the interface using the switchport port-security maximum number interface subcommand. (Defaults to one MAC address.)
|
Step 4.
|
(Optional) Define the action to take when a frame is received from a MAC address other than the defined addresses using the switchport port-security violation {protect | restrict | shutdown} interface subcommand. (The default action is to shut down the port.)
|
Step 5A.
|
Specify the MAC address(es) allowed to send frames into this interface using the switchport port-security mac-address mac-address command. Use the command multiple times to define more than one MAC address.
|
Step 5B.
|
Alternatively, instead of Step 5A, use the “sticky learning” process to dynamically learn and configure the MAC addresses of currently connected hosts by configuring the switchport port-security mac-address sticky interface subcommand
|
|
|
|
Term
Switching
In port security, what command enables port security? |
|
Definition
switchport port-security interface subcommand |
|
|
Term
Switching
To specify the max number of allowed MAC addresses associated with an interface when configuring port security?
What is the default? |
|
Definition
switchport port-security maximum number
Default is 1 |
|
|
Term
Switching
To define an action to take when a frame is received from a MAC address other than the defined addresses when configuring port security?
What is the default? |
|
Definition
switchport port-security violation {protect | restrict | shutdown}interface subcommand.
(The default action is to shut down the port.) |
|
|
Term
Switching
When configuring port security, which command specifies the MAC address(s) allowed to send frames into this interface? |
|
Definition
switchport port-security mac-address mac-address command |
|
|