Tweet
Lab: Configuring advanced switch Access Port Security
Lab Objective:
The objective of this lab exercise is to ensure that learned MAC addresses on a secured port are retained in the switch NVRAM in the event of a reboot. By default, secured MAC addresses are flushed during switch reboots.
Lab Purpose:
Retaining learned secure MAC addresses is an advanced skill. When a Cisco Catalyst switch configured with port security reboots, learned secure MAC address entries are flushed and have to be re-learned when the switch comes back up. As a Cisco engineer, understanding advanced features will give you the edge over fellow CCNAs.
Certification Level:
This lab is suitable for CCNA certification exam preparation
Lab Difficulty:
This lab has a difficulty rating of 10/10
Readiness Assessment:
When you are ready for your certification exam, you should complete this lab in no more than 15 minutes
Lab Topology:
Please use the following topology to complete this lab exercise:
Task 1:
Configure a hostname of Sw1 on your lab switch, and the hostname R1 on the router as illustrated in the topology.
Task 2:
Create VLAN 10 on switch Sw1 and assign port FastEthernet0/2 to this VLAN as an access port.
Task 3:
Configure IP address 172.16.0.1/27 on router R1's FastEthernet0/0 interface, and IP address 172.16.0.2/27 in switch Sw2's VLAN 10 interface. Verify that R1 can ping Sw1, and vice versa.
Task 4:
Configure port security on port FastEthernet0/2 on switch Sw1 so that any MAC addresses learned on that interface are written to the switch NVRAM. The NVRAM is the startup-configuration. Verify your configuration with port security commands in Cisco IOS.
The objective of this lab exercise is to ensure that learned MAC addresses on a secured port are retained in the switch NVRAM in the event of a reboot. By default, secured MAC addresses are flushed during switch reboots.
Lab Purpose:
Retaining learned secure MAC addresses is an advanced skill. When a Cisco Catalyst switch configured with port security reboots, learned secure MAC address entries are flushed and have to be re-learned when the switch comes back up. As a Cisco engineer, understanding advanced features will give you the edge over fellow CCNAs.
Certification Level:
This lab is suitable for CCNA certification exam preparation
Lab Difficulty:
This lab has a difficulty rating of 10/10
Readiness Assessment:
When you are ready for your certification exam, you should complete this lab in no more than 15 minutes
Lab Topology:
Please use the following topology to complete this lab exercise:
Task 1:
Configure a hostname of Sw1 on your lab switch, and the hostname R1 on the router as illustrated in the topology.
Task 2:
Create VLAN 10 on switch Sw1 and assign port FastEthernet0/2 to this VLAN as an access port.
Task 3:
Configure IP address 172.16.0.1/27 on router R1's FastEthernet0/0 interface, and IP address 172.16.0.2/27 in switch Sw2's VLAN 10 interface. Verify that R1 can ping Sw1, and vice versa.
Task 4:
Configure port security on port FastEthernet0/2 on switch Sw1 so that any MAC addresses learned on that interface are written to the switch NVRAM. The NVRAM is the startup-configuration. Verify your configuration with port security commands in Cisco IOS.
Comment