问一下这道题，端口安全

sinkevin

QUESTION 297
Refer to the exhibit. A junior network administrator was given the task of configuring port security on
SwitchA to allow only PC_A to access the switched network through port fa0/1. If any other device is
detected, the port is to drop frames from this device. The administrator configured the interface and tested
it with successful pings from PC_A to RouterA, and then observes the output from these two show
commands.

Which two of these changes are necessary for SwitchA to meet the requirements? (Choose two.)
A. Port security needs to be globally enabled.
B. Port security needs to be enabled on the interface.
C. Port security needs to be configured to shut down the interface in the event of a violation.
D. Port security needs to be configured to allow only one learned MAC address.
E. Port security interface counters need to be cleared before using the show command.
F. The port security configuration needs to be saved to NVRAM before it can become active.

关于选项B，配置里不是已经有在接口fa0/1上的配置了么，为什么还要在接口上enable？

陇上人

SwitchA# show port-security interface fa0/1
Port Security       isabled




BD

sinkevin

哦，没看到，谢谢解答

图森破___Lee

security 没有enable 吧 ，看那个配置，F0/1 还是diaable的，      ！！！