CCNA lab 7
Port security: sticky MACs, violations and err-disable
Lock switch ports to known devices with port security, watch an unknown laptop err-disable its port, and shut down the unused ports.
About 25 minutes 4 devices 4 tasksIntermediate
Scenario
PC1 sits on SW1 Fa0/1. Fa0/2 belongs to the manager's laptop (MAC 0011.2233.4455), which is away today, and an unknown device (ROGUE) has been plugged into that port instead. Secure Fa0/1 so it learns PC1's MAC as a sticky address and accepts only that one. Allow only the manager's laptop on Fa0/2 so the rogue device's traffic shuts the port down. Then disable every port nobody uses.
Your tasks
- Fa0/1 allows one MAC, learned as a sticky address from PC1, and PC1 can still ping R1.
- Fa0/2 accepts only the manager's laptop, 0011.2233.4455, and shuts down on a violation.
- Traffic from ROGUE err-disables Fa0/2.
- Shut down all unused ports: Fa0/3 to Fa0/24 and Gi0/2.
The lab checks the result, not the exact commands. For example, a ping task passes only when the ping really succeeds through the network you built.