Topic 3- Securing switch ports Flashcards

1
Q

What is port fast?

A
can be configured on a port
speeds up port activation
No RSTP delay in activating port
For ports with end devices only
(for ports you know cannot create a loop when connected)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is BPDU Guard?

A

Bridge Protocol Data Unit Guard
disables port with port fast connected if BPDU detected
- Prevents loop problems if switch is connected to what should be an end point

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

how to configure

A

configure interfaces in access mode on specific VLANs

  • set max concurrent MAC addr on a port
    ex: switchport port-security violation protect (drops frames from unknown sources)
    ex: switchport port-security violation restrict (drops frames from unknown sources and increments violation counter)
    ex: switchport port-security violation shutdown (shuts down interface)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is channel bonding?

aka port bonding

A

Combines up to 8 physical links into one logical link
protocols: Port aggression protocol (PAgP)
IEEE802.1d Link aggregation protocol (LACP)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is an EtherChannel?

A

It is created on a range of interfaces
(speed, duplex, trunking- must be done on both ends)
Use channel-group command to create port-channel interface
configure trunking on port-channel interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How to configure an etherchannel:

A
On a range of interfaces
- channel-group 1 mode active
on result port channel 1 interface
- config trunk encapsulation
-config trunk mode
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Channel-group

A

Command on ethernet interfaces used to add the specific interfaces to a single etherchannel. The number after the command is the port channel id

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Interface port-channel

A

Command that creates the bundled interface. Ports can be added to this interfave with the channel-group command

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Step by step etherchannel

A
Int range g0/1-2
Switchport trunk encapsulation dot1q
Switchport mode trunk
Channel-group 1 mode active
Int port-channel 1
Switchport trunk encapsulation dot1q
Switchport mode trunk
Switchport trunk allowed vlan 1,2,3
Do on both switches
Sh etherchannel port-channel
How well did you know this?
1
Not at all
2
3
4
5
Perfectly