Question

A network administrator configures port security on interface FastEthernet0/5 with a maximum of two MAC addresses and the violation mode set to 'restrict'. A third host is then connected through a small unmanaged hub on that port and begins sending traffic. What happens to the switch port and the traffic?

Accepted Answer

The port remains up; frames from the unknown MAC are dropped, and the violation counter increments while a log/SNMP notification is sent.

Answer

The port is placed into the err-disabled state and must be manually re-enabled before any traffic passes.

Answer

The port remains up and silently drops the unknown MAC's frames without incrementing any counter or generating a notification.

Answer

The port allows the third MAC address and dynamically raises the maximum to three addresses.