Which technology should you use to restrict access to a switch port to only a single MAC address?

Optimize your success on the FSNA Readiness Exam. Engage with flashcards and multiple choice questions, each designed with hints and explanations. Prepare thoroughly for your test and excel!

Multiple Choice

Which technology should you use to restrict access to a switch port to only a single MAC address?

Port security directly enforces which devices can use a switch port by binding the port to specific MAC addresses. You configure the port with a static MAC address or enable sticky learning so the first observed MAC is remembered and then locked in. If any other device with a different MAC tries to use that port, the switch detects a violation and can drop traffic, log the event, or shut the port down. This per-port MAC binding is exactly how you ensure only a single MAC address (or a small set) is allowed on that port. 802.1X focuses on user/device authentication against an authentication server, which is broader than just tying a port to one MAC. An ACL can filter traffic but doesn’t inherently restrict the port to a single MAC for every frame, whereas port security is designed for this purpose. Port binding is a similar concept in some contexts but is not as universally implemented for per-port MAC restrictions as port security.

Port security directly enforces which devices can use a switch port by binding the port to specific MAC addresses. You configure the port with a static MAC address or enable sticky learning so the first observed MAC is remembered and then locked in. If any other device with a different MAC tries to use that port, the switch detects a violation and can drop traffic, log the event, or shut the port down. This per-port MAC binding is exactly how you ensure only a single MAC address (or a small set) is allowed on that port.

802.1X focuses on user/device authentication against an authentication server, which is broader than just tying a port to one MAC. An ACL can filter traffic but doesn’t inherently restrict the port to a single MAC for every frame, whereas port security is designed for this purpose. Port binding is a similar concept in some contexts but is not as universally implemented for per-port MAC restrictions as port security.

More practice questions