350-601 Exam Results

To enable port security on all Cisco MDS series switches in the fabric and avoid the extensive manual configuration of the switch ports, the network engineer must activate the CFS (Cisco Fabric Services) distribution and enable the auto-learning port security feature on a per-VSAN basis. CFS is a protocol that allows the switches to distribute and synchronize configuration information across the fabric. By activating the CFS distribution for port security, the network engineer can propagate the port security configuration to all the switches in the fabric automatically, without having to configure each switch individually. The auto-learning port security feature allows the switches to learn and store the port security information of the devices that are already logged in and authorized on the ports, and prevent any unauthorized devices from logging in. The auto-learning port security feature can be enabled on a per-VSAN basis, which means that the port security information is specific to each VSAN and does not affect other VSANs. This provides more flexibility and granularity for the port security configuration. References :=

• Implementing and Operating Cisco Data Center Core Technologies (DCCOR) v1.2, Module 7: Data Center Storage Connectivity, Lesson 7.3: Fibre Channel Protocol
• Cisco MDS 9000 Family NX-OS Security Configuration Guide, Chapter: Configuring Port Security

 To discover a new chassis and establish all links from the chassis to the LAN network in a Cisco UCS domain with a vPC setup, the chassis discovery policy action should be set to one link. The Ethernet ports Eth1/1 and Eth1/2 should be configured as uplink Ethernet ports, and the link group preference should be set to Port Channel. This configuration ensures that the new chassis is properly discovered and that the links are correctly established to handle the LAN traffic.

References: The Implementing and Operating Cisco Data Center Core Technologies (DCCOR) course provides detailed instructions on chassis discovery and vPC configuration. For further guidance, Cisco’s official documentation on vPC best practices and configuration examples would be the appropriate references

 In a vPC (Virtual Port Channel) data center interconnect, both vPC peer devices must have the same system MAC address to ensure that remote switches perceive them as a single logical switch. Since the system MAC value on SW1 is 00:23:04:ee:be:20, the same value must be configured on SW3 to maintain consistency in the vPC domain and ensure seamless communication between the two data center fabrics connected through this vPC interconnect.

References: = The explanation can be inferred from Cisco’s official documentation and resources related to configuring and managing vPCs, ensuring that both peer devices in a vPC domain are configured with identical parameters, including the system MAC address.

The command ‘aaa authentication login default fallback error local’ is used to ensure that if RADIUS servers are unreachable, the system will fall back to using the local user database for SSH access to the Cisco MDS 9000 Series Switch.

figuration/guides/security/nx-os/sec_cli_6-x/cradtac1.html