Refer to the exhibit.
The following commands are executed on interface fa0/1 of 2950 Switch.
2950Switch(config-if)# switchport port-security
2950Switch(config-if)# switchport port-security mac-address sticky
2950Switch(config-if)# switchport port-security maximum 1
The Ethernet frame that is shown arrives on interface fa0/1.
What two functions will occur when this frame is received by 2950Switch?
| A. |
The MAC address table will now have an additional entry of fa0/1 FFFF.FFFF.FFFF. | |
| B. |
Only host A will be allowed to transmit frames on fa0/1. | |
| C. |
This frame will be discarded when it is received by 2950Switch. | |
| D. |
All frames arriving on 2950Switch with a destination of 0000.00aa.aaaa will be forwarded out fa0/1. | |
| E. |
Hosts B and C may forward frames out fa0/1 but frames arriving from other switches will not be forwarded out fa0/1. | |
| F. |
Only frames from source 0000.00bb.bbbb, the first learned MAC address of 2950Switch, will be forwarded out fa0/1 |
The first command
2950Switch(config-if)#switchport port-security
is to enable the port-security in a switch port.
In the second command
2950Switch(config-if)#switchport port-security mac-address sticky
we need to know the full syntax of this command is switchport port-security mac-address sticky [MAC]. The STICKY keyword is used to make the MAC address appear in the running configuration and you can save it for later use. If you do not specify any MAC addresses after the STICKY keyword, the switch will dynamically learn the attached MAC Address and place it into your running-configuration. In this case, the switch will dynamically learn the MAC address 0000.00aa.aaaa of host A and add this MAC address to the running configuration.
In the last command
2950Switch(config-if)#switchport port-security maximum 1
you limited the number of secure MAC addresses to one and dynamically assigned it(because no MAC address is mentioned, the switch will get the MAC address of the attached MAC address to interface fa0/1), the workstation attached to that port is assured the full bandwidth of the port. Therefore, only host A will be allowed to transmit frames on fa0/1 -> Only host A will be allowed to transmit frames on fa0/1 is correct.
After you have set the maximum number of secure MAC addresses for interface fa0/1, the secure addresses are included in the "Secure MAC Address" table (this table is similar to the Mac Address Table but you can only view it with the show port-security address command). So in this question, although you don't see the MAC address of host A listed in the MAC Address Table but frames with a destination of 0000.00aa.aaaa will be forwarded out of fa0/1 interface -> All frames arriving on 2950Switch with a destination of 0000.00aa.aaaa will be forwarded out fa0/1 is correct.