设为首页收藏本站language 语言切换
查看: 2618|回复: 3
收起左侧

[已解决] 一道ccna选择题

[复制链接]
发表于 2011-6-28 22:30:22 | 显示全部楼层 |阅读模式
A network administrator wants to ensure that only the server can connect to port Fa0/1 on a Catalyst
switch. The server is plugged into the switch Fa0/1 port and the network administrator is about to bring the
server online. What can the administrator do to ensure that only the MAC address of the server is allowed
by switch port Fa0/1? (Choose two.)
A. Configure port Fa0/1 to accept connections only from the static IP address of the server.
B. Employ a proprietary connector type on Fa0/1 that is incompatible with other host connectors.
C. Configure the MAC address of the server as a static entry associated with port Fa0/1.
D. Bind the IP address of the server to its MAC address on the switch to prevent other hosts from spoofing
the server IP address.
E. Configure port security on Fa0/1 to reject traffic with a source MAC address other than that of the
server.
F. Configure an access list on the switch to deny server traffic from entering any port other than Fa0/1.
Answer: CE

那位大侠帮忙解释一下,不太明白。谢谢!
发表于 2011-6-29 07:23:48 | 显示全部楼层
大概意思是一个端口下只能有一个mac地址,方法是:设置一条静态的地址 或者是利用端口安全机制
沙发 2011-6-29 07:23:48 回复 收起回复
回复 支持 反对

使用道具 举报

发表于 2011-6-29 10:17:11 | 显示全部楼层
C是将服务器mac静态设置到端口上
E是启用端口安全,拒绝服务器mac外的所有mac
板凳 2011-6-29 10:17:11 回复 收起回复
回复 支持 反对

使用道具 举报

发表于 2011-6-29 10:26:05 | 显示全部楼层
题目意思是管理员要确保只有一台serve连接到交换机的F0/1
  这就需要端口安全解决
C 是将serve的MAC绑定到交换机的F0/1

E 是交换机拒绝除了serve以外的所有流量

地板 2011-6-29 10:26:05 回复 收起回复
回复 支持 反对

使用道具 举报

您需要登录后才可以回帖 登录 | 论坛注册

本版积分规则

QQ|Archiver|手机版|小黑屋|sitemap|鸿鹄论坛 ( 京ICP备14027439号 )  

GMT+8, 2025-2-8 08:10 , Processed in 0.060724 second(s), 13 queries , Redis On.  

  Powered by Discuz!

  © 2001-2025 HH010.COM

快速回复 返回顶部 返回列表