Port Security supports which type of port?

The correct answer is A. IEEE 802.1Q tunnel port. Cisco Port Security can be enabled on IEEE 802.1Q tunnel ports (also called dot1q-tunnel ports, used in QinQ deployments). Port Security is explicitly NOT supported on dynamic trunk ports (ports using DTP negotiation), port-channel interfaces (EtherChannel member or logical…

Advanced Enterprise Campus Networks

Question

Options

AIEEE 802.1Q tunnel port
BDynamic trunk
CPort-channel
DRouted port

How the community answered

(43 responses)

A
86% (37)
B
7% (3)
C
5% (2)
D
2% (1)

Explanation

Cisco Port Security can be enabled on IEEE 802.1Q tunnel ports (also called dot1q-tunnel ports, used in QinQ deployments). Port Security is explicitly NOT supported on dynamic trunk ports (ports using DTP negotiation), port-channel interfaces (EtherChannel member or logical ports), or routed ports (Layer 3 interfaces). The reason dynamic trunk and port-channel ports are excluded is that port security requires a stable, single-mode Layer 2 access or tunnel context to track MAC addresses deterministically. 802.1Q tunnel ports behave as access ports at the service-provider edge and carry customer traffic with an additional VLAN tag, making MAC tracking feasible. Access ports and voice VLAN ports are also supported but were not listed as choices here.

Topics

#port security#802.1Q tunnel port#port types#access layer

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice