Which two CLI commands verify active MAC-based security settings? (Select two)

The show port-security command is the primary method for verifying the configuration and operational status of MAC-based security on an ArubaOS-Switch. It displays whether the feature is enabled on a port, the violation mode, address limits, and a list of all currently authorized secure MAC addresses. The show mac-address-table secure command displays the MAC forwarding table, filtered to show only the secure MAC addresses. This provides a direct view of which specific MAC addresses have been learned or configured as "secure" and are actively being permitted by the port security feature, confirming its operational state.

show mac-security status: This is not a valid command syntax in ArubaOS-Switch for viewing port security information. The feature is referred to as "Port Security". show interface security: This is not a valid command in ArubaOS-Switch. While interface-specific security settings exist, this command syntax is not used for MAC-based security.

1. ArubaOS-Switch Management and Configuration Guide K.16.01

Chapter: "Port Security"

Page 379. The section "Viewing port security status and configuration" explicitly details the show port-security [port-list] command. It states

"Use the show port-security command to display port security status and configuration data for the specified ports." The command output shown includes the list of "Secure MAC Addresses".

2. ArubaOS-Switch Management and Configuration Guide K.16.01

Chapter: "Port Security"

Page 375. The section "How port security works" explains

"When a port is configured for port security

you can assign it one or more static

secure MAC addresses... The switch uses these addresses to create a secure MAC address table for that port." This confirms that secure addresses populate the MAC address table

which is viewed with a variant of the show mac-address-table command

justifying the function of option C.