Cisco CCNA Certification Exam Tutorial: Port-Based Authentication

Cisco CCNA Certification Exam Tutorial: Port-Based Authentication

To pass your CCNA exam and earn this coveted certification- you must understand the details of port-based authentication. This knowledge has a great deal of value in production networks as well- si Contd...

To pass your CCNA exam and earn this coveted certification- you must understand the details of port-based authentication. This knowledge has a great deal of value in production networks as well- since this authentication scheme is regularly implemented. Let/' s take a look at this particular CCNA skill.

Consider a situation where you have a server that will be connected to your switch- and you want the port to shut down if a device with a different MAC address that that of the switch attempts to connect to that port. You could also have a situation where you have someone who has a connection to a switch port in his office- and he wants to make sure that only his laptop can use that port.

Both of these examples are real-world situations- and there are two solutions for each. First- we could create a static MAC entry for that particular switch port. I don/' t recommend this- mainly because both you and I have better things to do than manage static MAC entries. The better solution is to configure port-based authentication on the switch.
The Cisco switch uses MAC addresses to enforce port security. With port security- only devices with certain MAC addresses can connect to the port successfully. This is another reason source MACs are looked at before the destination MAC is examined. If the source MAC is non-secure and port-based authentication is in effect- the destination does not matter- as the frame will not be forwarded. In essence- the source MAC address serves as the password.

MAC addresses that are allowed to successfully communicate with the switch port are secure MAC addresses. The default number of secure MAC addresses is 1- but a maximum of 132 secure MACs can be configured.
When a non-secure MAC address attempts to communicate with the switch port- one of three actions will occur- depending on the port security mode. In Protect mode- frames with non-secure MAC addresses are dropped. There is no notification that a violation has occurred. The port will continue to switch frames for the secure MAC address.

In Restrict mode- the same action is taken- but a syslog message is logged via SNMP- which is a messaging protocol used by Cisco routers.
In Shutdown mode- the interface goes into error-disabled state- the port LED will go out- and a syslog message is logged. The port has to be manually reopened. Shutdown mode is the default port-security mode.

Port-based authentication is just one of the many switching skills you/' ll have to demonstrate to earn your CCNA certification. Make sure you know the basics shown here- including the action of each particular mode- and you/' re on your way to CCNA exam success!

tagged

How passion rx works | How cialis works | Free passion rx formula | Buy cealis sexual booster | Buy cialas see benefits | Buy cheap prescription Cialus | Buy taladafil see benefits


Related Articles:


• Webroot Window Washer
  For anyone concerned about what is left on their PC after using the Internet- Webroot Window Washer can set the mind at ease. Window Washer wipes away all traces of past PC use. It not only remove
  


• Cisco CCNP Certification: The BGP Weight Attribute
  When you/' re studying for the CCNP certification- especially the BSCI exam- you must gain a solid understanding of BGP. BGP isn/' t just one of the biggest topics on the BSCI exam- it/' s one of
  


• Cisco CCNA Certification Exam Tutorial: Access List Details You Must Know!
  To pass the CCNA exam- you have to be able to write and troubleshoot access lists. As you climb the ladder toward the CCNP and CCIE- you/' ll see more and more uses for ACLs. Therefore- you had be
  


• Cisco CCNP / BCMSN Exam Tutorial: BPDU Skew Detection
  You may look at that feature/' s name and think- "What is a BPDU Skew- and why do I want to detect it?" What we/' re actually attempting to detect are BPDUs that aren/' t being relayed as quickly a
  


• Cisco CCNA Certification Exam Tutorial: Variance And Unequal Cost Load Balancing
  To pass the CCNA exam- you/' ve got to know how to work with IGRP and EIGRP unequal-cost load balancing. You may not see much IGRP in production networks anymore- but you/' ll see a lot of EIGRP-
  


• What To Expect When Taking Your First Cisco Certification Exam
  Cisco Certification: Taking Your First Certification Exam You’ve studied hard you’ve practiced your configurations you’ve used your flash cards over and over again and finally- the big day is here.
  

• Home

Main Categories

• Arts Entertainment
• Business
• Communications
• Computers
• Disease Illness
• Fashion
• Finance
• Food Beverage
• Health Fitness
• Home Family
• Internet Business
• Politics
• Product Reviews
• Recreation Sports
• Reference Education
• Self Improvement
• Society
• Travel Leisure
• Vehicles
• Writing Speaking

Sub Category

• Computer Certification
• Data Recovery
• Games
• Hardware
• Networks
• Software
Boost your low drive
Raysahelian


 

 

 

 

 

© 2007 www.travelmycity.com.