Cisco Catalyst 3560-X Software Configuration Manual page 673

Chapter 1 Configuring DHCP Features and IP Source Guard
Configuring IP Source Guard for Static Hosts on a Layer 2 Access Port
You must configure the ip device tracking maximum limit-number interface configuration command
Note
globally for IPSG for static hosts to work. If you only configure this command on a port without enabling
IP device tracking globally or by setting an IP device tracking maximum on that interface, IPSG with
static hosts rejects all the IP traffic from that interface. This requirement also applies to IPSG with static
hosts on a private VLAN host port.
Beginning in privileged EXEC mode:
Command
Step 1 configure terminal
Step 2
ip device tracking
Step 3
interface interface-id
Step 4 switchport mode access
Step 5 switchport access vlan vlan-id
Step 6 ip verify source tracking port-security
Step 7
ip device tracking maximum number
Step 8 switchport port-security
Step 9
switchport port-security maximum value
Step 10
end
OL-25303-03
Purpose
Enter global configuration mode.
Turn on the IP host table, and globally enable IP device
tracking.
Enter interface configuration mode.
Configure a port as access.
Configure the VLAN for this port.
Enable IPSG for static hosts with MAC address filtering.
When you enable both IP source guard and port
Note
security by using the ip verify source
port-security interface configuration command:
The DHCP server must support option 82, or
•
the client is not assigned an IP address.
The MAC address in the DHCP packet is not
•
learned as a secure address. The MAC address
of the DHCP client is learned as a secure
address only when the switch receives
non-DHCP data traffic.
Establish a maximum limit for the number of static IPs
that the IP device tracking table allows on the port. The
range is 1to 10. The maximum number is 10.
You must configure the ip device tracking
Note
maximum limit-number interface configuration
command.
(Optional) Activate port security for this port.
(Optional) Establish a maximum of MAC addresses for
this port.
Return to privileged EXEC mode.
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
Configuring IP Source Guard
1-21