Maximizing Network Security with Port Security Settings
Why is it important to use the copy running-config startup-config command after setting up sticky MAC addresses for port security?
Choose the correct statement:
A) Only the startup-config file can manage port security.
B) The running-config file cannot use sticky addresses.
C) The request to use sticky addresses is only temporary.
D) The sticky addresses are temporary until the configuration is saved.
Final Answer:
The sticky addresses are temporary until the configuration is saved. The correct option is D.
After executing the "switchport port-security mac-address sticky" command, sticky MAC addresses are dynamically learned and added to the running configuration. However, these sticky MAC addresses are considered temporary and will be lost if the switch is rebooted or if the configuration changes are not saved. In order to make the sticky MAC addresses permanent and ensure they are retained even after a reboot, it is necessary to use the "copy running-config startup-config" command. This command saves the current running configuration (which includes the sticky MAC addresses) to the startup configuration file, making the changes persistent.
By using this command, the switch ensures that the configured port security settings, including the sticky MAC addresses, will be applied every time the switch boots up. Without saving the running configuration to the startup configuration, any dynamically learned sticky MAC addresses would be lost upon reboot, potentially disrupting network connectivity and security measures.
In summary, the "copy running-config startup-config" command is crucial to maintain the integrity and persistence of port security settings, including sticky MAC addresses, beyond temporary operational periods. Therefore, it is important to always save the configuration to ensure network security and stability.