Refer to the Exhibit.
— Exhibit —
{master:0}[edit interfaces]
user@switch# show
ge-0/0/6 {
unit 0 {
family ethernet-switching {
port-mode access;
vlan {
members vlan100;
}
}
}
}
ge-0/0/7 {
unit 0 {
family ethernet-switching {
port-mode access;
vlan {
members vlan100;
}
}
}
}
{master:0}[edit ethernet-swtiching-options]
user@switch#show
secure-access-port {
interface ge-0/0/6.0 {
mac-limit 1 action drop;
}
vlan 100 {
mac-move-limit 1 action drop;
}
}
— Exhibit –Referring to the exhibit, what will the mac-move-limit command on ge-0/0/6 do?
A.
Packets will be dropped if the switch detects the same source MAC address on interface ge-0/0/6 and ge-0/0/7.
B.
Packets will be dropped if the switch detects the same source MAC address on two separate
interfaces in VLAN 100.
C.
Packets will be dropped and the event will be logged if the switch detects the same source
MAC address on two separate interfaces in VLAN 100.
D.
Packets will be dropped and the event will be logged if the switch detects the same source
MAC address on ge-0/0/6 and ge-0/0/7.
The question is incorrect. There is no MAC-MOVE-LIMIT command on ge-0/0/6.
According to Juniper:
– MAC-LIMIT is configured on the interface
– MAC-MOVE-LIMIT is configured on the vlan
– the DROP option drops the packet and logs it.
the correct answer is C
I agree.