Exam 200-301 topic 1 question 1057 discussion

C. switchport port-security mac-address abcd.abcd.abcd To enable port security with a manually assigned MAC address, the engineer would use the "switchport port-security mac-address abcd.abcd.abcd" command. This command sets the allowed MAC address for the port. The VLAN assignment for the VoIP handset is separate and not included in the port-security command.

final question yay!

https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuration_guide/b_consolidated_config_guide_3850_chapter_011111.html#:~:text=Switch(config%2Dif)%23%20switchport%20port%2Dsecurity%20mac%2Daddress%200000.0000.0004%20vlan%20voice

C tested successfully in PT. NB: switchport has to be in Access mode. Switch(config-if)#switchport port-security Switch(config-if)#switchport port-security mac-address 0040.0bbd.37b2 Switch(config-if)#

Answer is C

https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuration_guide/b_consolidated_config_guide_3850_chapter_011111.html#:~:text=Switch(config%2Dif)%23%20switchport%20port%2Dsecurity%20mac%2Daddress%200000.0000.0004%20vlan%20voice

C is correct

1357 Questions now, still grinding :(

A , can work if you used trunk mode in interface

It´s C - port is an access port, so no vlan command

'switchport port-security mac-address abcd.abcd.abcd vlan 4' is possible. However, it is possible when it is a 'trunk' port. The problem is that it is an access port and vlan cannot be configured because it is connected to handset.

B switchport port-security [mac-address mac-address [vlan {vlan-id | {access | voice}}] Example: Switch(config-if)# switchport port-security mac-address 00:A0:C7:12:C9:25 vlan 3 voice https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuration_guide/b_consolidated_config_guide_3850_chapter_011111.html

(Optional) Use the switchport port-security mac-address -mac-address- interface subcommand to predefine any allowed source MAC addresses for this interface. Use the command multiple times to define more than one MAC address.

Enter one of these options after you enter the vlan keyword: vlan-id—On a trunk port, you can specify the VLAN ID and the MAC address. If you do not specify a VLAN ID, the native VLAN is used. access—On an access port, specifies the VLAN as an access VLAN. voice—On an access port, specifies the VLAN as a voice VLAN. It's more likely that it's access conncection becuase of the Voip, so we need to specify vlan voice as it stated here. *Check the link in 10th step: https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuration_guide/b_consolidated_config_guide_3850_chapter_011111.html#ID437

C. Error, only MAC address specified without VLAN or port security enabled

A is correct the command is switchport port-security [mac-address mac-address [vlan {vlan-id | {access | voice}}] Example: Switch(config-if)# switchport port-security mac-address 00:A0:C7:12:C9:25 vlan 3 voice https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuration_guide/b_consolidated_config_guide_3850_chapter_011111.html#ID437 and since in the questionit stated vlan 4 and you can have multiple Voice Vlans , A is more accurate than B

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-3/configuration_guide/sec/b_173_sec_9300_cg/port_security.html switchport port-security mac-address sticky [mac-address | vlan {vlan-id | {access | voice}}] Example: Device(config-if)# switchport port-security mac-address sticky 00:A0:C7:12:C9:25 vlan voice