Free CCNA | Port Security | Day 49 | CCNA 200-301 Complete Course

Рет қаралды 115,680

Күн бұрын

Free CCNA 200-301 flashcards/Packet Tracer labs for the course: jitl.jp/ccna-files
📖 My CCNA Book: Vol 1: jitl.jp/book1-yt Vol 2: jitl.jp/book2-yt
📚Boson ExSim: jitl.jp/ccna-exsim ← the BEST practice exams for CCNA
💻Boson NetSim: jitl.jp/ccna-netsim ← 100+ detailed guided labs for CCNA
💯ExSim + NetSim: jitl.jp/ccna-kit ← get BOTH for a discount!
🥇CCNA Gold Bootcamp: www.flackbox.com/cisco-ccna-c... ← the course I used to get my CCNA (top rated course on the Internet)
Get the course ad-free with bonus quizzes and more on JITL Academy: courses.jeremysitlab.com
In Day 49 of this free CCNA 200-301 complete course, you will learn about port security.
In this FREE and COMPLETE CCNA 200-301 course you will find lecture videos covering all topics in Cisco official exam topics list, end-of-video quizzes to test your knowledge, flashcards to review, and practice labs to get hands-on experience.
SUPPORT MY CHANNEL
The best way to support my channel is to like, comment, subscribe, and share my videos to help spread the word!
If you can spare to leave a tip, here are some options:
PayPal: paypal.me/jeremysitlabYT
BAT (Basic Attention Token) tips in the Brave browser (www.jeremysitlab.com/brave-br...)
======================
Patreon: / jeremysitlab
======================
Cryptocurrency Addresses
Bitcoin: bc1qxjpza7nx46e8a2rtz6vkcrvxx9mfjnufdrk0jv
Ethereum: 0x08B4325b1B99B05d850A3bfCd4A6620D770cfB64
======================
0:00 Introduction
0:54 Things we'll cover
1:22 Port Security intro
6:19 Why port security?
7:52 Enabling port security
9:14 'show port-security interface'
11:45 Manually re-enable a disabled interface
12:32 ErrDisable Recovery
15:16 Violation modes
17:12 Violation modes: Restrict
18:22 Violation modes: Protect
19:24 Secure MAC Address aging
22:35 Sticky secure MAC addresses
24:35 MAC address table
25:16 Command review
25:34 Things we covered
26:29 Quiz 1
27:18 Quiz 2
28:00 Quiz 3
28:41 Quiz 4
29:31 Quiz 5
30:23 Boson ExSim
#cisco #CCNA

Пікірлер: 156

@steve-harveyy 3 жыл бұрын

He protec He attac He stop network attac

@JeremysITLab 3 жыл бұрын

pinned 😂

@aazzam4165 7 ай бұрын

hero 🤣🤣🤣🤣🤣

@AndroidTap Жыл бұрын

I get a rush of serotonin every time he says '...but you don't need to remember this for the ccna.'

@misterribal 3 жыл бұрын

Just passed the CCNA with a 983 score! Thanks Jeremy, I am at a uni and this will definitely help me when I'll be searching for my first job.

@JeremysITLab 3 жыл бұрын

Awesome, congrats! That's an awesome score. Best of luck in your future studies and career

@devilsadvocate2163 2 жыл бұрын

983?? That is freaking brilliant man!!! Do you mind sharing with us what resources you used to obtain that grade? And did you buy any practice exams?

@crihala Жыл бұрын

@@devilsadvocate2163 Nobody will replay after they successed with their exam :) That's human nature..

@llllll-ux2lz Жыл бұрын

How amazing are you! Way to go!

@ZerohourTV 10 ай бұрын

how many questions was the exam, and is it all multiple choices? or there is writing code in it? would love an answer if you can

@carlosenriquelopezperez7269 3 жыл бұрын

Jeremy, I really want to thank you, I am taking a CCNP ENCOR course in an academy, after 4 classes, I have seen everything you teach here, now I understand how complete this course is, that in a way, it leads you to the CCNP, it really takes you I congratulate you, for your work and effort, you are the best.

@sanskarsingh9538 7 ай бұрын

You are an angel sent by the gods. You cover things more than just CCNA. You cover important off topics as well. You have my respect!

@paulroberts8542 4 ай бұрын

I don't know if it was omitted on purpose but the 'switchport port-security maximum ' is important. You refer to the default maximum being one MAC address and refer to cases - such as supporting IP phones - when more than one is needed. But you don't show how to increase the maximum.

@fredharris1049 3 жыл бұрын

I passed my CCNA exam in part by watching your videos. Thank you for your work.

@stunr1887 3 жыл бұрын

Hello Jeremy, I passed the CCNA on 07/09/21. Thank you for all the help with your amazing course. I supplemented your course with Wendell Odom's CCNA guide and passed on the first try. I will definitely be subscribing to show my appreciation.

@riamu1985 3 жыл бұрын

Hi were u new to networking or did u have some experience??

@arashshafieyan4647 3 жыл бұрын

Thank you very much Jeremy . There is no doubt that you are one of the best CISCO instructors.

@JeremysITLab 3 жыл бұрын

Thank you, Arash :)

@tg9460 3 жыл бұрын

I cannot thank you enough Jeremy. Your videos are amazing.

@benjaminazu-crabbe3818 3 жыл бұрын

Jerry is Great..trust me you helping alot of guys out there..your tutorial are simple and detailed

@wwolfram33 2 жыл бұрын

Great lesson! I like how you explain the importance of status values and how they will behave in real world situations. Thanks!

@hope6176 3 жыл бұрын

The great jeremey 🙏, you are really great. Waiting for you are ccnp videos.

@thomasploutonas4065 3 жыл бұрын

Thanks again for a great lesson

@Michael-yl9rl 3 жыл бұрын

❤❤❤ I already pass the CCNA, but still I'm watching Jeremy's videos. The best CCNA Guru ever....

@valentineonodu1285 3 жыл бұрын

How big was the syllables for the exam?

@Michael-yl9rl 3 жыл бұрын

@@valentineonodu1285 if you watched all Jeremy's videos, the course is not complete yet...I think this is about 80% complete. Wait till Jeremy finish all the topics so you can be sure to pass otherwise you need to do your own research on those topics not yet covered...automation, security and wireless topics...download the exam topics for CCNA from Cisco.com for your reference. Also Jeremy has a link showing which topics he already covered. Master Ip routing, static and dynamic.....ospf configuration....LACP PAGP also came up...

@valentineonodu1285 3 жыл бұрын

@@Michael-yl9rl 😢😢😢 wow, was hoping on someone shedding more light, cause I was comparing the time limit it'll take for that or a software developer, but with your ccna, one can earn a standard salary (not minimum wage or something close to working in a gas station?)

@olawoleabiola7909 3 жыл бұрын

Thank you Jeremy, your videos are amazing

@Mikaiii 2 жыл бұрын

Thanks for the awesome videos - I'm about to take my CCNA soon and just rewatching your videos once more and applying what I learned through my other resources. Also, small thing I noticed, there's a bird of some kind that you can hear crowing at the 5:06-5:07 timestamp. I just noticed it and thought it was funny lol

@godfreyjustinian9935 2 жыл бұрын

Thank Jeremmy for your tutorials, i really appreciate.

@franksoko02 3 жыл бұрын

Thanks for making learning fun Jeremy.

@nicholassattaur9964 3 жыл бұрын

Thank you Jeremy! Loved the content

@bernymartinez1025 3 жыл бұрын

Great lessons jeremy.

@amri727 3 жыл бұрын

Mind blowing very-very details and easy to understand thank you sir

@ahmedlateef5244 3 жыл бұрын

Thank you so much, Jeremy.

@WeBBerTutoriais 3 жыл бұрын

Fantastic! Thanksss!

@cesarbrenner5146 3 жыл бұрын

One of the subjects I was waiting for your explanation.goood

@-b777ljq3 2 жыл бұрын

it's a very good lecture, thorough, in depth, and in detail, quiz is very good.

@faizaussi352 3 жыл бұрын

Thank you Jeremy.

@maircosta422 2 ай бұрын

I have ccna in two days, and im so sorry I didnt find ur videos sooner! I get three chances and so if I dont pass first time, i know its ok because ill learn from you and be proficient on the fundamentals of networking. great great content. thx

@Horidz 2 ай бұрын

Soo, how'd you do? It as intimidating as they make it seem?

@maircosta422 2 ай бұрын

I failed actually. Im repeating it next monday

@Horidz 2 ай бұрын

@@maircosta422 youll kill it the 2nd time. What did you use to study the 1st time around? Did you lab alot as well?

@Horidz Ай бұрын

@@maircosta422 hey did you pass the 2nd time around?

@maircosta422 Ай бұрын

Tysm for asking. I did pass! Yes, labs are important. I got trunking, subnetting a /24 to a /28 and etherchannel.

@stephenapenkwah 3 жыл бұрын

Thank you Jeremy

@straightpath3800 Жыл бұрын

Jeremy is the King for real. we love you.

@dhanushm.s9608 3 жыл бұрын

Thanks Jeremy ☺️

@shashikasamarakoon9990 3 жыл бұрын

Thank you, sir. Got all points

@DandReiOwnU 3 жыл бұрын

I really appreciate your work. Thank you.

@JeremysITLab 3 жыл бұрын

Thanks, Andrei :)

@glenntembo2693 3 жыл бұрын

Thanks always J

@ninosodicho382 2 жыл бұрын

Well explained :)

@cdialpha Жыл бұрын

At, 04:15 we say that we can configure the maximum number of MAC addresses able to be learned by the switch, but do we ever go through the configuration ? presumably something like SW1# port-security max ?

@DeansLists Жыл бұрын

Yea he forgot to add it to this video, but it's in the next lab video

@jksplaylist2721 Жыл бұрын

Hi, Jeremy! Many thanks to your channel for these amazing videos. I just realized you missed explaining how to configure the maximum mac address allowed on the port. I googled it though and tried it on PT.

@jksplaylist2721 Жыл бұрын

The command I used is SW1(config-if)# switchport port-security maximum 2

@michaelhier3081 3 жыл бұрын

Great lessons, have watched all of them so far :) Will you also be doing a CCNP ENCOR course in the future, if not for free then to purchase?

@Ali-1A295 Жыл бұрын

Thanks very much for this wonderful videos Please could you explain the changes in the Cisco certs ? Thank you 💞

@ahtishamsham9230 3 жыл бұрын

Your Vedios are very helpful ❤

@VeryBigBang13 3 жыл бұрын

Thank you

@prafulchandarana3137 2 жыл бұрын

Hi Jeremy, I have a question after viewing Day 49 (Port security) and day 20-22 (STP/RSTP). How Port security work with STP/RSTP as the the network path is automatically reconfigured in case of failure of one link in the network? Hope my question is clear.

@user-yg9qn4gs2t Жыл бұрын

Thank you Jeremy!!

@mohamedsalah-gk5bn 2 жыл бұрын

thank you , really amazing

@JeremysITLab 2 жыл бұрын

Thanks :)

@apollosolutions9961 2 жыл бұрын

excellent video bro!

@JeremysITLab 2 жыл бұрын

Thank you :)

@somaliudiidaceeb2904 Жыл бұрын

Hi Jeremy thanks again for this great course. I have a question. If i have a Cisco Switch Access-Switch for example C9300L and i configure a port that Lightweight AP will connect to and Wireless-Clients will connect to that AP. If i give IOS command: Config-if#Switchport port-security maximum 1. Will it go to shutdown state? because clients have MAC addresses and AP has MAC. Does switchports learn Wireless clients MAC addresses? Thank you in advance.

@Duck_III 3 ай бұрын

Thanks Jeremy 🔑

@BR-hp3tm 2 жыл бұрын

.Static mac addresses do not age out but does dynamic secure mac addresses age out ?

@Alien-Networking 7 ай бұрын

Hi Mr, Jeremy, I tried the lab in GNS3 using vios_l2 switch Version 15.2, and I've noticed that the Security Violation Count doesn't reset unless I go to the interface, disable port security and re-enable it again. I have a physical home lab but being lazy to power up the devices and set up all the cables, 😫 I didn't try it.

@kamranislamli6748 3 жыл бұрын

Thanks for good job

@JeremysITLab 3 жыл бұрын

Thank you :)

@Mohamed-mi3iz 13 күн бұрын

We can do it let's goooooo!!!!!!!!!!!!!!!!!!!

@matsu1994 Жыл бұрын

The Boson question confuses me.. If the switch does not remove already learned MAC addresses, how does it learn a MAC address? It has already learned the MAC of both PCs.

@tomatordia8448 2 жыл бұрын

the best

@mg7670 25 күн бұрын

Thanks!

@skynet.yousha 3 жыл бұрын

Thanks again for your explanation. I want to understand, what the use of using mac address aging time feature in port security? Normally a secure Mac-Address learned should remain in the mac-address table but can be changed manually if ever the need be, so that only the desirable device can access the network. What happen if at the time the aging process exhausted(using type absolute), a rogue device is connected on the same port (by unplugging the cable).

@JeremysITLab 3 жыл бұрын

Security is always a trade-off, making things less convenient to use etc. So aging is just a convenient feature that you can decide to use or not to use, although it is a trade-off for slightly less security.

@deepbaban6864 3 жыл бұрын

How many videos will it take to complete this course.

@gilmoshe854 4 ай бұрын

thanks!

@nedatuaconta2431 9 ай бұрын

tysm

@majiddehbi9186 3 жыл бұрын

Thx for that Just tell us is there other topic network fundamental 1.1.c all along til 1.1g still to cover sir Just question and as always God bless for all ure help thx again

@user-ej3iw8lw3w Жыл бұрын

protected is more restricted than restrict!

@SULAIMANBOCKRIE 10 ай бұрын

I'm really enjoying your tutorials. Please make a video for me how to configure a vpn on cisco switch

@ConflictEconomics 10 ай бұрын

I enable port security on a switchport, by simply using " sw port-security" but when I attach a second device to the port it simply learns the new device's mac address and doesn't block the port or go into err-disabled. Anyone know why? I have done absolutely no other configurations to the port in question regarding port security. It is however, sw access vlan 10.

@somethingspecial8163 2 жыл бұрын

Hello sir which concepts are coming under switching ? I hope you will give replay thank you

@ez3871 2 жыл бұрын

Hi Jeremy. Thanks for the best course. Could you please tell me what command you used in minute of 14:16 of this video to see how many seconds are left for "err-disabled" to go away?

@JeremysITLab 2 жыл бұрын

Thanks for the kind words! The command is shown in that slide ;)

@eljondee6109 Жыл бұрын

I think you forgot to teach us the command to configure a maximum mac address to be allowed. Thanks!

@ss3mania28 3 жыл бұрын

How long more is the course

@airsofttrooper08 2 жыл бұрын

So one time just for sh*ts and giggles I brought in my lap top to work. I work at one of the top 10 fortune 500 companies (Not going to say which). I figured their security policy would be very explicit. To test it, I changed the mac address and IP address of my personal laptop to reflect that of my work laptop. I plugged the ethernet into my laptop, Then I started a wireshark capture. I had access to all of the companies private data (encrypted of course) that was being broadcast in my subnet. So how would one go about implementing port security in a situation like that? It was quite easy for me to see the traffic and get on to the companies internal (not guest) network from my personal machine?

@Saksham0412 9 ай бұрын

An access port can have only one VLAN configured on the interface; it can carry traffic for only one VLAN. A trunk port can have two or more VLANs configured on the interface; it can carry traffic for several VLANs simultaneously.

@sunburn8863 3 жыл бұрын

hi Jeremy, what about DHCP limit rate can we use it to prevent DHCP exhaustion

@JeremysITLab 3 жыл бұрын

Yes! I will explain it in the DHCP snooping video.

@michaelgodwin7702 Жыл бұрын

Not sure if others ran into this issue, but in packet tracer, it seems that by default my switch shuts down a port whenever I "unplug" it, so I wasn't able to simulate any of this unless I kept the host connected to the switchport and just manually changed it's mac address. Strange, another odd incongruency between my version of packet tracer and yours, it's becoming very common and definitely more than a nuisance at this point.

@carlosenriquelopezperez7269 3 жыл бұрын

Hi Jeremy, I hope you are well, one question, until this class, what topics remain to be seen? Greetings

@JeremysITLab 3 жыл бұрын

You can check the course progress here: jeremysitlab.com/ccna-course-progress

@trunk2874 2 жыл бұрын

Hi Jeremy, are there hands-on config questions on the ccna 200-301 exam or everything is multiple choice questions?

@devilsadvocate2163 2 жыл бұрын

Hi! If I'm not mistaken, all the questions are multiple choice :)

@eframovavraham9999 3 жыл бұрын

Hi all I don’t get the last question The switch connected to the hub so the first MAC address learned by the switch is the hubs MAC address So the 2 hosts frames need to be dropped ?!? Or hub don’t have MAC address on their interfaces ?

@nonegiven 3 жыл бұрын

Hubs are layer 1 which means no mac addresses (mac addresses are layer 2). The hub will forward both mac addresses from both PC's but will not have a mac address for itself as it doesn't generate its own traffic.

@BR-hp3tm 2 жыл бұрын

would you care to explain please .....12:28 why security violation count should not go higher than 1?

@JeremysITLab 2 жыл бұрын

Why would it go higher than 1? Check the sentence before that to see why it won't.

@BR-hp3tm 2 жыл бұрын

@@JeremysITLab thanx for ur time bro......good day.

@LucianC137 3 жыл бұрын

To re enable the interface from err disabled, do we have to do shutdown first then no shutdown, or just no shutdown will work?

@JeremysITLab 3 жыл бұрын

You have to use 'shutdown' and then 'no shutdown'

@jhde9067 2 жыл бұрын

At 6:48 , the attacker would have to know the addresses that are allowed, no? Edit , it's 6:44 . Talking about an attacker manually configuring the Mac address.

@JeremysITLab 2 жыл бұрын

Yes, that's correct. For example they could identify the MAC address of the device that is usually connected to the port.

@bradward9538 2 жыл бұрын

Got the Boson Exam question wrong at the end. Is there a reason why port security wouldn't drop all packets coming from the Hub, since technically a Hub will have its own MAC address that will be added to the SWA table?

@nightbat13131 11 күн бұрын

A hub does not have a mac address. Hubs count as Layer 1 - they are basically fancy wire splitters.

@abdallahelshuraydeh1697 2 жыл бұрын

Can't thank you enough for such an amazing course, Jeremy! I have a question though, in this lecture, you say at first: by default secure MAC addresses will not 'age out', and later on you say: by default only dynamically-learned secure MAC addresses will age out. Can't seem to find what I had missed there!

@JeremysITLab 2 жыл бұрын

If aging of secure MAC addresses is enabled (so, you change the timer to something other than 0), by default only dynamically-learned secure MAC addresses will age out.

@abdallahelshuraydeh1697 2 жыл бұрын

@@JeremysITLab Thank you! God bless.

@azertytnt421 3 жыл бұрын

Hello , Mr. Please , can you inform me if that all the channel of ccna 200-301 topic are included in exam ccna 200-301 , Because there some topic do not exist in the exam as example DTP , VTP Thank you very much

@JeremysITLab 3 жыл бұрын

If I include something in the course, I put it there for a reason.

@riamu1985 3 жыл бұрын

When u will be finished with full course?? Btw great job u r the best teacher.

@JeremysITLab 3 жыл бұрын

This year!

@UnforgivenApocalypse Жыл бұрын

Dumb question: default port-security means that only the first MAC plugged in is valid, but what happens if that first device is a switch? Since source/destination MACs change with each hop--and assuming we don't put port-security on this downstream switch--would any device connected to the switch be considered valid? Since, if I'm understanding correctly, PC A, B, and C would all read as the same MAC if filtered through a switch.

@JeremysITLab Жыл бұрын

Switches don’t change the src/dst of frames! They just forward them.

@UnforgivenApocalypse Жыл бұрын

@@JeremysITLab Oh, my mistake. So routers change MACs, then?

@JeremysITLab Жыл бұрын

@@UnforgivenApocalypse Yep, the router will change the source MAC to that of its own interface, and the destination to the MAC of the next hop router (or the destination host, if it is the last router in the path).

@UnforgivenApocalypse Жыл бұрын

@@JeremysITLab Ahhhhh, okay. I had just gotten confused and thought both routers and switches did that. Thank you for clarifying!

@danycock8493 3 жыл бұрын

hi Jermy can we have automation and wireless please. I appreciate your hard work. but its taking too long to warp up course.can we finish ASAP.

@danycock8493 3 жыл бұрын

I know appreciate your work.please take your time.I am just addicted to your course.

@Alien-Networking 7 ай бұрын

Images in GNS3 do not work exactly the same as real Cisco devices, I tried the lab today using real Catalyst 3750 and then 2960G with a 2911 router, if you disconnect a cable, the switch will immediatly drain its MAC address table unless you manually configure the interface with [switchport port-security mac address H.H.H or sticky] but in GNS3 it doesnt. Also, the violation counter will reset to 0 only if you shutdown then up the inteface and connect it to the device with autorized MAC and the last source MAC will not disappear, however, in GNS3 if you disable port-security and re-enable it again, everything will reset to 0. these are not major problems in GNS3, but when it comes to spanning-tree it real sucks.

@afkar_zz1680 3 жыл бұрын

Sir when I'm statically configure my pc mac address in switch which is connected to it.. It is not allowing the command. Showing duplicate mac address found... Why is that

@JeremysITLab 3 жыл бұрын

Did you already configure the same MAC address on a different interface?

@ifeanyiidika5386 19 күн бұрын

@JeremysITLab you didn't show how to configure port security to enable an interface accept two or more Secured MAC addresses in a case where PC is connected to an IP phone then to a switch interface. You said something about it but did not show the configuration. Thank you

@susmitamazumder8390 2 жыл бұрын

19:45 min By default, secure mac addresses will NOT 'age out'. then 21:07 min by default only dynamically -learned secure mac addresses will age out. I am confused. there are 3 types of secure mac add: static, sticky and dynamically-learned

@JeremysITLab 2 жыл бұрын

By default, secure MAC addresses will not age out because the timer is 0. If an aging timer is set, by default only dynamically-learned secure mac addresses will age out.

@susmitamazumder8390 2 жыл бұрын

@@JeremysITLab thanks

@RnR5 2 жыл бұрын

My head Hurts 🥲

@Mohamed-mi3iz 13 күн бұрын

Did you passed?😄

@rudy6459 2 жыл бұрын

Thanks for the videos, Jeremy. But why did you snub poopgirl at the end of your video? 🤔

@JeremysITLab 2 жыл бұрын

Take a guess lol

@JOYASISHMAZUMDER 11 ай бұрын

is the saying on 20:25 alright ? isnt that contradictary ?

@JeremysITLab 11 ай бұрын

Yes, it's correct. The MAC address ages out, but can be re-learned if another frame that MAC address is received - no contradiction.

@JOYASISHMAZUMDER 11 ай бұрын

*from that MAC addresss?@@JeremysITLab

@chrisfoster3772 14 күн бұрын

why didn't you annouce poopgirl for the jcnp channel members list?

@1337soundeZ 9 ай бұрын

Quiz 4 is incorrect - c) Unplugging the unauthorized device will also re enable the interface after 300 seconds like you showed

@majiddehbi9186 3 жыл бұрын

hello just to inform you i couldn't reach the page thx

@JeremysITLab 3 жыл бұрын

Hi, which page couldn't you reach?

@majiddehbi9186 3 жыл бұрын

@@JeremysITLab the page about the courses progress

@JeremysITLab 3 жыл бұрын

@@majiddehbi9186 What is the link address?

@majiddehbi9186 3 жыл бұрын

@@JeremysITLab links where we could check out the courses progress by the way i send screenshot of the page on ure email

@michaelrogers1266 Жыл бұрын

Port security only worked for me when statically configured, don't you love P.T😂😂😂

@pieleanumihai928 5 ай бұрын

😁

@hdjr3983 2 жыл бұрын

I think 1 sub would be not enough so I subbed twice for you. 1 of my main account, 1 of my second. Thanks, Sir. Hope you doing well.

@montassirben8560 Жыл бұрын

Thank you

@aruizsilva 2 ай бұрын

Thanks!!