From: Chris Lewis (chrlewiscsco@gmail.com)
Date: Thu Jun 29 2006 - 13:17:42 ART
My 2 cents is that it is not a wise idea to think that any config posted on
groupstudy will get you points in the exam, it is all down to the wording,
which can be easily changed to make any specific config inapplicable.
One thing to consider, you will not get this error if the two ports in
question are on different switches :)
It is better by far to experiment with all options you can think of,
understand the trade offs and read the question in the exam very carefully.
Chris
On 6/29/06, tony hall <tony_hall123@hotmail.co.uk> wrote:
>
> Hi Group,
> The only way i can make hsrp and port security work as the config below.
> will its ok to earn points in lab? I tried to configure the HSRP virtual
> address as well on both switch ports but i am only able to put it on 1 int
> and then get error , """the secure address already configured on diff
> int"""
>
> CONFIG---
> SW#sh run int fa0/5
> Building configuration...
>
> Current configuration : 259 bytes
> !
> interface FastEthernet0/5
> switchport mode access
> switchport port-security
> switchport port-security maximum 2
> switchport port-security violation restrict
> switchport port-security mac-address 0017.9496.f738 <------physical
> mac-add
> of int fa0/0 of R5
> no ip address
> end
>
> SW#sh run int fa0/6
> switchport mode access
> switchport port-security
> switchport port-security maximum 2
> switchport port-security violation restrict
> switchport port-security mac-address 0017.9496.f7c0 <-------physical
> mac-add
> of int fa0/0 of R5
> no ip address
> end
>
> SW#sh port
> SW#sh port-security
> Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security
> Action
> (Count) (Count) (Count)
>
>
-----------------------------------------------------------------------------
-- > > Fa0/5 2 2 0 Restrict > Fa0/6 2 1 25 Restrict > > ----------------------------------------------------------------------------- -- > Total Addresses in System : 3 > Max Addresses limit in System : 1024 > > > > SW#sh port-security inter > SW#sh port-security interface fa0/5 > Port Security : Enabled > Port status : SecureUp > Violation mode : Restrict > Maximum MAC Addresses : 2 > Total MAC Addresses : 2 > Configured MAC Addresses : 1 > Sticky MAC Addresses : 0 > Aging time : 0 mins > Aging type : Absolute > SecureStatic address aging : Disabled > Security Violation count : 0 > > SW#sh port-security interface fa0/6 > Port Security : Enabled > Port status : SecureUp > Violation mode : Restrict > Maximum MAC Addresses : 2 > Total MAC Addresses : 1 > Configured MAC Addresses : 1 > Sticky MAC Addresses : 0 > Aging time : 0 mins > Aging type : Absolute > SecureStatic address aging : Disabled > Security Violation count : 25 > > _________________________________________________________________ > Windows Live Messenger has arrived. Click here to download it for free! > http://imagine-msn.com/messenger/launch80/?locale=en-gb > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sat Jul 01 2006 - 07:57:34 ART