Can anyone explain the STP Security features. Just like BPDU
guard, Root Guard.

Hi JITENDERA, i m specially looking for u?????

Answers were Sorted based on User's Feedback



Can anyone explain the STP Security features. Just like BPDU guard, Root Guard. Hi JITENDERA, i ..

Answer / jitendera kumar sinha

Spanning Tree Protocol Features
1 Bridge Protocol Data Unit (BPDU) Guard
2 Root Guard
3 EtherChannel Guard
4 Loop Guard

these 4 are major spaing tree feature

for understand that at first we must understand the spaing
tree term
root bridge-it is the bridge with the best bridge id.it is
the focal point of the network and which point is block and
which point is in forwading mode is are made from the root
bridge.
here comes bpdu gurd
slection cretirea of root bridge depend upon BPdu default
vale 2 sec.
each bpdu conatin
1 mac address
2 bridge priorty(32768 default)
3 bridge identy
so
BPDU contains management and control data information that
is used to determine the root bridge and establish the port
roles—for example: root, designated, or blocked port.

2 root port-.the root port is alway link directly conected
to root bridge.if there is more then one link then port
cost is detirmine if port cost is smae then bridge identy
comes in account
here comes root gurd
in a shairesd swiched envorment where there is many
conection betwen switches it is important to identify the
correct placement of the root bridge.With the Root Guard
feature, a Layer 2 interface is set as the designated port,
and if any device through this port becomes the root
bridge, the interface is placed into the blocked stae
this is all about root gurd

i will expalin two parametar tomorrow because i have some
work
thanks
jitendera kumar sinha

Is This Answer Correct ?    1 Yes 0 No

Can anyone explain the STP Security features. Just like BPDU guard, Root Guard. Hi JITENDERA, i ..

Answer / jitendera kumar sinha

here is 3rd answer
ehternet gurd is also known as port securty
let undersatnd what is that

UnderstandingHow PortSecurity Works:
You can use port security to block input to an Ethernet,
Fast Ethernet, or Gigabit Ethernet
port when the MAC address of the station attempting to
access the port is different from
any of the MAC addresses specified for that port.
Alternatively, you can use port security
to filter traffic destined to or received from a specific
host based on the host MAC
address.
When a secure port receives a packet, the source MAC
address of the packet is compared
to the list of secure source addresses that were manually
configured or autoconfigured
(learned) on the port. If a MAC address of a device
attached to the port differs from the
list of secure addresses, the port either shuts down
permanently (default mode), shuts
down for the time you have specified, or drops incoming
packets from the insecure host.
The port's behavior depends on how you configure it to
respond to a security violation.
If a security violation occurs, the Link LED for that port
turns orange, and a link-down
trap is sent to the Simple Network Management Protocol
(SNMP) manager. An SNMP
trap is not sent if you configure the port for restrictive
violation mode. A trap is sent only
if you configure the port to shut down during a security
violation

Is This Answer Correct ?    1 Yes 0 No

Post New Answer

More CCNA Interview Questions

What is CRC and which layer it use?

4 Answers   CMS,


What are two purposes for segmenting a network with a bridge? (Choose two) A. to reduce collisions B. to increase collisions C. to add collision domains D. to reduce collision domains E. to have more broadcast domains

3 Answers   Ecobank, RNP,


Which three of the following are true statements about connection-oriented sessions? A.) The segments delivered are acknowledged back to the sender upon their reception B.) Any segments not acknowledged are retransmitted by the receiver C.) A manageable data flow is maintained in order to avoid congestion, overloading and loss of any data D.) Segments are sequenced back into their proper order upon arrival at their destination

3 Answers  


In the setup dialog, what do the square brackets indicate? A. current or default spores B. hard coded values that cannot be modified C. values entered by the administrator but not saved D. values that must be written to NVRAM before becoming enabled

1 Answers  


What is the difference between TCP and UDP? A.) TCP is connection-oriented; UDP uses acknowledgements only B.) TCP is connection-oriented; UDP is connectionless C.) Both TCP and UDP are connection-oriented, but only TCP uses windowing D.) TCP and UDP both have sequencing, but UDP is connectionless

4 Answers  






If you have configured IPX on a Serial interface, which command would display the IPX network and node address on the Serial 1 interface? A.) show interface B.) show ipx s1 C.) show interface s1 D.) show ipx int serial 1 E.) show ipx int brief

1 Answers  


What is difference between routing and routed protocols?

0 Answers  


1.hi all, my question is how maximum number of ports can exist in a switch? 2.Which type of switching good in using and why?

4 Answers   HCL,


Identify the 3 key features of the Cisco Discovery Protocol? A.) Off by default B.) Will allow for the discovery of layer 3 addresses on neighbor routers C.) Verifies connectivity D.) Open standard E.) Does not require any layer 3 protocols to be configured

1 Answers  


Difference between routed and routing protocols not difference between protocol between those.

3 Answers   HCL, TCS,


Which two statements accurately define IP addressing rules? (Choose two) A. IP multicast addresses start with 240 B. A host Carbon of all 1 a indicates a network broadcast C. The value of zero (0) in the host Carbon means all hosts on the network D. IP addresses are four octets long and contain a network Carbon and a host Carbon

2 Answers  


What are the disadvantages of symmetric algorithms?

0 Answers   CCIE,


Categories