350-401 · Question #763
Which two commands should you enter to enable IP Source Guard with IP and MAC address filtering?(Choose two)
The correct answer is A. ip verify source tracking E. ip verify source port-security. To enable IP Source Guard with both IP and MAC address filtering, commands like ip verify source tracking leverage DHCP snooping bindings, and ip verify source port-security integrates with port security.
Question
Which two commands should you enter to enable IP Source Guard with IP and MAC address filtering?(Choose two)
Options
- Aip verify source tracking
- Bswitchport port-security
- Cip verify unicast source
- Dip verify source
- Eip verify source port-security
How the community answered
(65 responses)- A94% (61)
- B3% (2)
- C2% (1)
- D2% (1)
Why each option
To enable IP Source Guard with both IP and MAC address filtering, commands like `ip verify source tracking` leverage DHCP snooping bindings, and `ip verify source port-security` integrates with port security.
The `ip verify source tracking` command enables IP Source Guard to use the DHCP snooping binding table, which contains both IP and MAC address bindings, thereby providing both types of filtering.
The `switchport port-security` command enables port security but does not directly enable IP Source Guard or its filtering mechanisms.
The `ip verify unicast source` command is not the standard or primary command for enabling IP Source Guard with comprehensive IP and MAC address filtering.
The `ip verify source` command alone enables IP Source Guard, but for explicit IP and MAC address filtering, more specific keywords like `tracking` or `port-security` are typically used.
The `ip verify source port-security` command enables IP Source Guard to integrate with port security, allowing it to enforce both source IP and MAC addresses based on the port security configuration.
Concept tested: IP Source Guard configuration with IP and MAC filtering
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_snooping/configuration/xe-3s/sec-data-snooping-xe-3s-book/sec-ip-src-guard.html
Topics
Community Discussion
No community discussion yet for this question.