Cisco 3032 Software Configuration Manual page 576

Configuring IP Source Guard
This example shows how to enable IPSG with static hosts on a port.
Switch(config)# ip device tracking
Switch(config)# ip device tracking max 10
Switch(config-if)# ip verify source tracking port-security
This example shows how to enable IPSG for static hosts with IP filters on a Layer 2 access port and to
verify the valid IP bindings on the interface Gi1/0/3:
Switch# configure terminal
Enter configuration commands, one per line.
Switch(config)# ip device tracking
Switch(config)# interface gigabitethernet1/0/3
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 10
Switch(config-if)# ip device tracking maximum 5
Switch(config-if)# ip verify source tracking
Switch(config-if)# end
Switch# show ip verify source
Interface
---------
Gi1/0/3
Gi1/0/3
Gi1/0/3
This example shows how to enable IPSG for static hosts with IP-MAC filters on a Layer 2 access port,
to verify the valid IP-MAC bindings on the interface Gi0/3, and to verify that the number of bindings on
this interface has reached the maximum:
Switch# configure terminal
Enter configuration commands, one per line.
Switch(config)# ip device tracking
Switch(config)# interface gigabitethernet1/0/3
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 1
Switch(config-if)# ip device tracking maximum 5
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security maximum 5
Switch(config-if)# ip verify source tracking port-security
Switch(config-if)# end
Switch# show ip verify source
Interface
---------
Gi0/3
Gi0/3
Gi0/3
Gi0/3
Gi0/3
This example displays all IP or MAC binding entries for all interfaces. The CLI displays all active as
well as inactive entries. When a host is learned on a interface, the new entry is marked as active. When
the same host is disconnected from that interface and connected to a different interface, a new IP or MAC
binding entry displays as active as soon as the host is detected. The old entry for this host on the previous
interface is marked as INACTIVE.
Switch# show ip device tracking all
IP Device Tracking = Enabled
IP Device Tracking Probe Count = 3
IP Device Tracking Probe Interval = 30
---------------------------------------------------------------------
Cisco Catalyst Blade Switch 3130 and 3032 for Dell Software Configuration Guide
22-22
Filter-type Filter-mode
----------- -----------
ip trk active
ip trk active
ip trk active
Filter-type Filter-mode
----------- -----------
ip-mac trk active
ip-mac trk active
ip-mac trk active
ip-mac trk active
ip-mac trk active
Chapter 22 Configuring DHCP Features and IP Source Guard
End with CNTL/Z.
IP-address Mac-address
--------------- -----------------
40.1.1.24
40.1.1.20
40.1.1.21
End with CNTL/Z.
IP-address Mac-address
--------------- -----------------
40.1.1.24 00:00:00:00:03:04
40.1.1.20 00:00:00:00:03:05
40.1.1.21 00:00:00:00:03:06
40.1.1.22 00:00:00:00:03:07
40.1.1.23 00:00:00:00:03:08
Vlan
----
10
10
10
Vlan
----
1
1
1
1
1
OL-12247-04