July 2009
Intermediate to advanced
752 pages
23h 19m
English
Content preview from JUNOS Enterprise SwitchingBecome an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Chapter Review Answers
Answer: E. MAC limits on the EX are port-level settings, not VLAN-level settings. Failing to learn a MAC can result in flooding within the VLAN for that MAC, but this is not precluded by any specification, and you could choose to disable the port upon a violation if flooding is an issue. By limiting the number of MACs, you prevent MAC table overflow and the potential for flooding of previously learned addresses, which could pose a security or performance threat.
Answer: A. ARP inspection is based on the information contained in the DHCP snooping database. It prevents ARP spoofing, not IP address spoofing. The latter is still possible with a static ARP entry that would bypass the need for ARP. IP Source Guard prevents IP address spoofing.
Answer: False. Access links are untrusted for DHCP by default. Trunk interfaces are trusted by default. Use the
dhcp-trustedsetting at the[edit ethernet-switching-options secure-access-port interface<interface-name>]hierarchy to permit a DHCP server on an access link when you enable the DHCP snooping feature.Answer: D. All of the features listed are set on a VLAN basis at the
[edit ethernet-switching-options secure-access-port vlan<vlan-name>]hierarchy.Answer: C. Of the options listed, only EAP-TLS is certificate-based. In fact, MAC authentication is not an EAP method at all!
Answer: D. MAC authorization can be local or via a RADIUS server and neither method disables EAP methods on the related interface. The former bypasses ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.