ETExamTower
Q12Security

Refer to the exhibit. VSANs 4041 and 4042 are exchanged between two Cisco MDS 9000 Series Switches, MDS-1 and MDS-2. The goal is to deploy a security mechanism on MDS-1 that allows only MDS-2 to join the fabric. Complete the MDS-1 configuration by dragging the code snippets into the boxes. Not all code snippets are used. <DragDrop items={["20:01:00:3a:9c:54:21:81","20:01:00:de:fb:fd:db:71","20:0a:00:3a:9c:54:21:81","32","103","11"]} slots={[{"answer":"20:01:00:3a:9c:54:21:81","id":"vsan4041_swwn"},{"answer":"32","id":"vsan4041_domain"},{"answer":"20:01:00:3a:9c:54:21:81","id":"vsan4042_swwn"},{"answer":"11","id":"vsan4042_domain"}]} template={"*MDS-1 configuration;\nconfig terminal\nfeature fabric-binding\nfabric-binding database vsan 4041\nswwn {{vsan4041_swwn}} domain {{vsan4041_domain}}\nfabric-binding activate vsan 4041\n\nfabric-binding database vsan 4042\nswwn {{vsan4042_swwn}} domain {{vsan4042_domain}}\nexit\nfabric-binding activate vsan 4042"} reuse={true} explanation={"Fabric binding authorizes switches by switch WWN and static domain ID. MDS-2 uses WWN 20:01:00:3a:9c:54:21:81, domain 32 in VSAN 4041, and domain 11 in VSAN 4042. Adding those entries permits MDS-2 while excluding unlisted switches."} />

Question exhibit
← → navigate · a answer
Discussion · 5
4
I think that would be the correct answer, but I wouldn't put my head on that for vsan 4041 SWWN 20:0a:00.... domain 11 for vsan 4042 swwn 20:01:00... domain 32
2
answer is correct
1
One of the better questions. Not many quality questions are left in cisco written exams. Just memorizing ones :( Answer is correct. Principal switch assigns Domain-ID per vsan. In the picture we can see that the local wwn is not the same as the principal switch wwn. There are only two switches in the picture. So the principal switch is MDS-2, which assigns domain-ids. so get domain id's and MDS-2 (principal) wwns and fill it -> A.
1
for vsan 4041 SWWN 20:0a:00.... domain 11 for vsan 4042 swwn 20:01:00... domain 32
1
Answer is right. MDS-2 will be allowed to join, MD-2 is the principal, so: For VSAN 4041 swwn (MDS-2): 20:01:00:3a:9c:54:21:81 domain 32 For VSAN 4042 swwn (MDS-2): 20:0a:00:3a:9c:54:21:81 domain 11