WEBVTT

1
00:00.000 --> 00:00.500 align:middle line:84%


2
00:00.500 --> 00:02.920 align:middle line:90%
As you and I wrap up this
section on Port Security,

3
00:02.920 --> 00:05.575 align:middle line:90%
let's take a moment and take a
look at some review questions.

4
00:05.575 --> 00:07.200 align:middle line:90%
And for question one,
instead of having

5
00:07.200 --> 00:09.060 align:middle line:90%
a pick list of the
answers, I want

6
00:09.060 --> 00:12.008 align:middle line:90%
this to be kind of like an
essay or open-ended question.

7
00:12.008 --> 00:13.050 align:middle line:84%
And the question is this.

8
00:13.050 --> 00:14.880 align:middle line:90%
How does Port
Security, how does it

9
00:14.880 --> 00:18.680 align:middle line:90%
prevent unwanted devices from
connecting to a single switch

10
00:18.680 --> 00:19.240 align:middle line:84%
port?

11
00:19.240 --> 00:22.020 align:middle line:90%
And my goal is, can we
explain that to somebody?

12
00:22.020 --> 00:23.970 align:middle line:90%
If somebody asked us
for a human resources

13
00:23.970 --> 00:26.250 align:middle line:90%
interview or a
technical interview

14
00:26.250 --> 00:29.370 align:middle line:90%
and they ask us how does port
city work, can we tell them?

15
00:29.370 --> 00:30.960 align:middle line:90%
That's my goal
for us right here.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

15
00:29.370 --> 00:30.960 align:middle line:90%
That's my goal
for us right here.

16
00:30.960 --> 00:41.760 align:middle line:84%


17
00:41.760 --> 00:44.510 align:middle line:90%
And so when asked this question,
we could explain that, well,

18
00:44.510 --> 00:46.480 align:middle line:90%
if we have a switch and
we have a switch port

19
00:46.480 --> 00:49.180 align:middle line:90%
and it's connected to
some office or a cube,

20
00:49.180 --> 00:51.570 align:middle line:90%
we have users that are going
to connect via that cable

21
00:51.570 --> 00:52.810 align:middle line:84%
or via that port.

22
00:52.810 --> 00:54.510 align:middle line:90%
Now, if they connect
a switch or a hub

23
00:54.510 --> 00:56.218 align:middle line:90%
and they start connecting
lots of devices

24
00:56.218 --> 00:58.860 align:middle line:90%
to it, which is undesirable
for our network, what we do

25
00:58.860 --> 01:00.030 align:middle line:84%
is use Port Security.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

25
00:58.860 --> 01:00.030 align:middle line:84%
is use Port Security.

26
01:00.030 --> 01:03.180 align:middle line:90%
And the Port Security is
looking at how many source Mac

27
01:03.180 --> 01:05.080 align:middle line:90%
addresses are coming
in on that port.

28
01:05.080 --> 01:07.080 align:middle line:90%
If there's a whole bunch
of different source Mac

29
01:07.080 --> 01:09.270 align:middle line:90%
addresses trying to send
traffic into that port,

30
01:09.270 --> 01:11.980 align:middle line:90%
the switch is going to
stop that from happening.

31
01:11.980 --> 01:14.940 align:middle line:90%
So Port Security is simply
controlling the quantity

32
01:14.940 --> 01:16.560 align:middle line:90%
of different Mac
addresses that are

33
01:16.560 --> 01:19.170 align:middle line:90%
able to be seen coming
inbound as source layer

34
01:19.170 --> 01:21.450 align:middle line:90%
2 addresses in frames
as those frames are

35
01:21.450 --> 01:23.160 align:middle line:84%
being sent into the switch.

36
01:23.160 --> 01:24.420 align:middle line:84%
And question number two.

37
01:24.420 --> 01:27.240 align:middle line:90%
Regarding Port Security,
what is the default

38
01:27.240 --> 01:30.050 align:middle line:90%
for the number of Mac addresses
it's willing to tolerate?
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

38
01:27.240 --> 01:30.050 align:middle line:90%
for the number of Mac addresses
it's willing to tolerate?

39
01:30.050 --> 01:32.550 align:middle line:90%
That's what I like to think of
it when the features enabled.

40
01:32.550 --> 01:36.120 align:middle line:90%
And what is the default
violation action if more than

41
01:36.120 --> 01:38.880 align:middle line:90%
that number of Mac addresses
shows up on that port?

42
01:38.880 --> 01:49.617 align:middle line:84%


43
01:49.617 --> 01:51.950 align:middle line:90%
And this might even be in
that same technical interview.

44
01:51.950 --> 01:53.367 align:middle line:90%
We're talking to
our manager who's

45
01:53.367 --> 01:55.040 align:middle line:84%
asking us about Port Security.

46
01:55.040 --> 01:57.530 align:middle line:90%
And what we could do is
say, well, in Port Security,

47
01:57.530 --> 01:59.440 align:middle line:90%
the default number
of Mac addresses

48
01:59.440 --> 02:01.550 align:middle line:90%
that that port is willing
to know about and learn
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

48
01:59.440 --> 02:01.550 align:middle line:90%
that that port is willing
to know about and learn

49
02:01.550 --> 02:03.860 align:middle line:84%
about by default is just one.

50
02:03.860 --> 02:05.750 align:middle line:90%
So that second Mac
address that shows up,

51
02:05.750 --> 02:07.340 align:middle line:84%
it's going to cause a violation.

52
02:07.340 --> 02:10.220 align:middle line:90%
And furthermore, the
default violation

53
02:10.220 --> 02:14.900 align:middle line:84%
is to shut down that port.

54
02:14.900 --> 02:17.465 align:middle line:90%
So if we enable port security
and use these defaults,

55
02:17.465 --> 02:19.840 align:middle line:90%
we're going to allow a maximum
of one source Mac address.

56
02:19.840 --> 02:23.650 align:middle line:90%
And a violation of that is going
to make the port shut down.

57
02:23.650 --> 02:26.350 align:middle line:90%
And I am happy that we were
able to spend the time together

58
02:26.350 --> 02:28.362 align:middle line:90%
in these videos for
getting Port Security.

59
02:28.362 --> 02:30.820 align:middle line:90%
And I look forward to seeing
you in the next set of videos.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

59
02:28.362 --> 02:30.820 align:middle line:90%
And I look forward to seeing
you in the next set of videos.

60
02:30.820 --> 02:33.640 align:middle line:90%
Meanwhile, I hope this has
been informative for you.

61
02:33.640 --> 02:36.990 align:middle line:90%
And I'd like to thank
you for viewing.