Ch.10 Layer 2 switching
Write the command that generated the following output.
show mac address-table
What command will show you the forward/filter table??
show mac-address table
what two commands can you use to verify that port security has been configured on a port fastethernet 0/12?
show port-securit int f0/12, show running-config
Write the command required to disable the port if a security violation occurs. write the command and not the prompt?
switchport port-security violation shutdown
In the work area in the following graphic, draw the functions of a switch from the list on the left to the right.
Address learning Forward/filter decisions Loop avoidance
what are the three switch functions at layer 2?
Address learning, Forward/filter decisions, Loop avoidance
Which of the following methods will ensure that only one specific host can connect to port f0/3 on a switch?
Configure statically, configure it to accept only one MAC address.
Restrict?
Drops packets with unknown addresses until enough have dropped. Generates log message to SNMP trap.
Protect?
Drops packets with unknown source addresses until enough secure mac addresses drop below maximum value
True/False: The layer 2 switch must have an IP address set and the PCs connecting to the switch must use that address as their default gateway?
False
If a destination MAC address is not in the forward/filter table, what will the switch do with the frame?
Forward out of all frames except the one it received the frame on
which of the following is not an issue addressed by STP?
Gateway redundancy
Shutdown?
Is the default violation mode, puts interface into error-disabled state. sends an SNMP trap. perform shut/no shutdown command to make interface usable again
Which of the following statements is not true with regard to layer 2 switching?
Layer 2 switches and bridges are faster than router because they don't take up time looking at the Data-Link layer header information.
The conference room has a switch port available for use by the presenter during classes, and each presenter uses the same PC attached to the port. You would like to prevent other PCs from using that port. you have completely removed the former configuration in order to start anew. Which of the following steps is not required to prevent any other PCs from using the port?
Make the port a trunk port
Which violation mode drops packets with unknown source addresses until you remove enough secure MAC addresses to drop below the maximum but also generates a log message, causes the security violation counter to increment, and sends an SNMP trap but does not disable the port?
Protect
What does the sticky keyword in the port-security command provide?
Provide static MAC addresses without having to type in the address
What statements is/are true about the output shown here?
Requires the no shutdown command
Which two violation modes send out an SNMP trap?
Restrict and Shutdown
Which two of the following switch port violation modes will alert you via SNMP that a violation has occured on that port?
Restrict, shutdown
What issues arises when redundancy exists between switches is shown in the figure?
Routing loop
____is the loop avoidance mechanism used by switches.
STP
If a frame is received on a switchport and the source MAC address is not in the forward/filter table, what will the switch do?
Send frame out of all the ports except the one it was received on
In the diagram shown, what will the switch do if a frame with a destination mac ADDRESS OF 000A.f467.63b1 is receieved on f0/4?
Sends the frame out of all the ports except the one it was recieved on (from the switch)
which Cisco IOS command is used to verify the port security configuration of a switch port?
Show port-security interface
What will be the effect of executing the following command on port f0/1?
Statically defines a mac address to be allowed on the port.
what are the default modes for a switch port configured with port security?
Switchport mod desirable
Which of the following commands in this configuration is a prerequisite for the other commands to function?
Switchport port-security
Write the command that would limit the number of MAC addresses allowed on a port to 2. write only the command and not the prompt.
Switchport port-security maximum 2
Write the command that will save a dynamically learned MAC address in the running-configuration of a Cisco switch?
Switchport security mac-address sticky
On which default interface have you configured an iP address for a switch?
VLAN 1
Write the command that must be present on any switch that you need to manage from a different subnet.
ip default-gateway
List the two commands that generated the last entry in the MAC address table shown.
mac address-table static show mac address-table