Port-security with HSRP

Kudo’s to INE for this lab. It’s the first (and consequentially the last) lab in the Vol I switching portion of their workbook that really made me feel like I was preparing for the CCIE, and not just doing repetition of labs (even though I understand the importance of that). Here’s what the lab required:

  • 3 routers, on a shared medium (connected to the same switch)
  • HSRP enabled on two of them
  • Port security enabled on the switch, but the switch should only learn one MAC address per port

Call it a small victory I guess, and if you already knew this..congrats. The solution to not sending the switch an interface mac AND HSRP Mac?

R6(config-if)#standby use-bia
R6#sh standby
FastEthernet0/0 - Group 1
  State is Active
    2 state changes, last state change 00:03:44
  Virtual IP address is 155.1.146.254
  Active virtual MAC address is 001b.0cd0.3b68
    Local virtual MAC address is 001b.0cd0.3b68 (bia)

Of course, the original HSRP MAC was 0000.0c07.ac01, so this verifies our MAC is now using the BIA of the interface. Pretty slick..I think I will use this down the road!

Leave a Comment


NOTE - You can use these HTML tags and attributes:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>