A storage network engineer must configure a 48-port Cisco MDS switch to reject any login requests to VSAN 10 from unauthorized Fibre Channel devices and switches. All the devices that were already…

The correct answer is D. switch(config)# port-security activate vsan 10. Option D (port-security activate vsan 10) is correct because the activate keyword does two things simultaneously: it enforces port-security on VSAN 10 to block unauthorized FC devices, and it auto-learns all currently logged-in devices, adding them to the allowed list…

Implementation

Question

A storage network engineer must configure a 48-port Cisco MDS switch to reject any login requests to VSAN 10 from unauthorized Fibre Channel devices and switches. All the devices that were already logged in to the switch from this VSAN must be allowed without any manual configuration. Which configuration must be applied?

Options

Aswitch(config)# feature port-security
Bswitch(config)# feature port-security
Cswitch(config)# feature port-security
Dswitch(config)# port-security activate vsan 10

How the community answered

(42 responses)

A
5% (2)
B
2% (1)
C
12% (5)
D
81% (34)

Explanation

Option D (port-security activate vsan 10) is correct because the activate keyword does two things simultaneously: it enforces port-security on VSAN 10 to block unauthorized FC devices, and it auto-learns all currently logged-in devices, adding them to the allowed list automatically - satisfying the "no manual configuration" requirement.

Options A, B, and C all represent feature port-security, which only enables the port-security feature globally on the switch; this alone does nothing to restrict or auto-learn devices on a specific VSAN like VSAN 10. Without the VSAN-level activate command, no enforcement or auto-discovery takes place.

Memory tip: Think "ACTIVATE = Auto-learn + Enforce." If the exam question mentions allowing existing logged-in devices without manual configuration, that's your signal to use activate rather than just enable - activate does the heavy lifting by learning the current fabric state automatically.

Topics

#Port Security#VSAN Configuration#FC Access Control#MDS Implementation

Community Discussion

No community discussion yet for this question.

Full 300-625 Practice