From: Joseph Brunner (joe@affirmedsystems.com)
Date: Sun Aug 19 2007 - 15:35:03 ART
I just did this lab on the rack rentals;
If you read the task carefully you would under stand the situations calls
for the "restrict" violation mode where a syslog message is sent. Whereby
"protect" mode does not send the syslog.
Also the mac access-list extended is for NON IP traffic. Hence, your
solution does not meet the task's restriction of only allowing traffic from
these 4 hosts.
-Joe
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
shiran guez
Sent: Sunday, August 19, 2007 1:24 PM
To: Cisco certification
Subject: IEWB v4 lab 6 question 1.8 -- hope to get responce from Brain
In my solution I have set MAC access list to filter out the 4 mac address
mac access-list extended MAC_FILTER
permit host 0050.7014.8ef0 any
permit host 00d0.586e.b710 any
permit host 00c0.144e.07bf any
permit host 00d0.341c.7871 any
!
interface FastEthernet0/10
switchport access vlan 10
switchport mode access
mac access-group MAC_FILTER in
but in the solution guid they are using Port Security altough the tought
entered my mind to do that, I didnt as it was not said to act upon violation
(and on the solution guid it is indicated that it is said to shut when there
is a violation)
So my question is:
Is there a error in the Solution Guid or did I miss somthing in the
question, as I went trough this sevral times and I do not see any request to
shut on violation.
Regards,
-- Shiran Guez MCSE CCNP NCE1 http://cciep3.blogspot.com
This archive was generated by hypermail 2.1.4 : Sat Sep 01 2007 - 11:32:12 ART