Which two limitations of IP Source Guard are true? (Choose two.)

A. It is supported only on packets switched in hardware.

B. It is supported only on ingress Layer 2 ports.

C. It is supported only on egress Layer 3 ports.

D. It is supported only an PAgP EtherChannels.

E. It is supported only on ingress Layer 3 ports.






 

Suggested Answer: AB

Restrictions for IP Source Guard
Because the IP source guard feature is supported only in hardware, IP source guard is not applied if there are insufficient hardware resources available. These hardware resources are shared by various other ACL features that are configured on the system. The following restrictions apply to IP source guard:
✑ Supported only on ingress Layer 2 ports.
✑ Supported only in hardware; not applied to any traffic that is processed in software.
✑ Does not support filtering of traffic based on MAC address.
✑ Is not supported on private VLANs.
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SY/configuration/guide/sy_swcg/ip_source_guard.html

This question is in 300-115 Implementing Cisco IP Switched Networks (SWITCH) Exam
For getting Cisco Certified Network Professional (CCNP) Routing and Switching Certificate





Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Cisco.
Trademarks, certification & product names are used for reference only and belong to Cisco.
The website does not contain actual questions and answers from Cisco's Certification Exam.