Second item of task states that router ports should only allow a single MAC address before errdisable state occurs. But looking at PG's answer, the only router port that gets addressed is R5's port, which happens to be an access port.
If this was the real exam, my inclination would be to do exactly as told and include ALL the router ports, including those that are set up as trunk ports, which is what I did. However, any trunk port with port-security enabled goes into errdisable state when the 2nd vlan gets any traffic. I tried the "switchport port-security maximum 1 vlan" thinking that it would set 1 max mac-address per vlan, but it doesn't appear to be working for me. Is the PG correct in not addressing these router trunk ports?
