The engineer notices frequent MAC and IP address moves between different leaf switch ports. Which action prevents this problem from occurring?

Question

Options

• ADisable enforce subnet check.
• BEnable endpoint loop protection.
• CEnable rogue endpoint control.
• DDisable IP bridge domain enforcement.

• A
  5% (1)
• C
  95% (19)

Explanation

The Main difference between Endpoint loop protection and rogue endpoint is, that rogue endpoin Detection can detect IP moves, Endpoint loop protection can only detect MAC Moves.Same for the possible actions, when using Endpoint loop protection the possible actions are "Port disable" or "BD learn disabled on per Leaf level". When using rogue endpoin Detection the possible actio is, that that the leaf will programm a static entry to disable learning of the specific endpoint. I think Endpoint loop protection is more flexible because in some cases you do not what to disable a whole BD or Port, because some other Endpoints, EPGs, L3OUTs which are running on the same port should not be affected by the mechanism. https://community.cisco.com/t5/application-centric-infrastructure/endpoint-loop-protection-vs- rogue-endpoint-control-policy/td-p/3796631

No community discussion yet for this question.