CCNA Port-Sec 7: Static Secure MAC Binding

Bundle lab · $29.99

Troubleshoot a Layer-2 forwarding fault that breaks a user VLAN between access/distribution switches, then implement static secure MAC binding on the client-facing access port. You will restore end-to-end VLAN 20 reachability and enforce a single authorized MAC on the user port using port-security with violation restrict.

Learning objectives

• Diagnose and correct a trunk allow-list drift that prunes VLAN 20 from one uplink
• Align native VLANs across trunks and harden them (allowed list, native 999, nonegotiate)
• Configure static secure MAC binding on a host-facing access port and set maximum and violation restrict
• Verify secure address state and confirm port-security is not applied to trunks
• Explain how static binding differs from sticky learning

Troubleshooting focus

• Verify every link's interface status and IP addressing (`show ip interface brief`) and correct any interface that is down or misaddressed.
• Confirm each device's running configuration matches the lab objective, and bring any interface, route, or service that is not in its expected state back to health.
• Trace end-to-end reachability with ping/traceroute and isolate the first hop where forwarding fails.