Question

A storage administrator is enabling Fibre Channel port security on VSAN 20 of a Cisco MDS switch to prevent unauthorized devices from logging into fabric ports. To speed initial configuration, they enable auto-learning, let all current devices perform FLOGI, and then plan to make the learned bindings permanent. Which action must they take so that the learned entries are retained and no NEW devices can be learned automatically afterward?

Accepted Answer

Disable auto-learning after the database is populated, then activate/commit the port security database so the learned bindings become enforced permanent entries

Answer

Leave auto-learning enabled permanently so the switch continuously validates every device that logs in against the fabric

Answer

Copy the running configuration to startup configuration, which automatically converts the auto-learned entries into static bindings

Answer

Deactivate the port security database and re-enable it, forcing the switch to freeze the current learned bindings