Cisco IE-4000 Software Configuration Manual page 425

Configuring IP Source Guard
Monitoring and Maintaining IP Source Guard
Command
10. end
11. show ip verify source interface interface-id
12. show ip device track all
[active | inactive] count
Monitoring and Maintaining IP Source Guard
Command
show ip device tracking
show ip source binding
show ip verify source
copy running-config startup-config
Configuration Examples for IP Source Guard
Enabling IPSG with Source IP and MAC Filtering: Example
This example shows how to enable IPSG with source IP and MAC filtering on VLANs 10
and 11:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# interface GigabitEthernet1/17
Switch(config-if)# ip verify source port-security
Switch(config-if)# exit
Switch(config)# ip source binding 0100.0022.0010 vlan 10 10.0.0.2 interface GigabitEthernet1/17
Switch(config)# ip source binding 0100.0230.0002 vlan 11 10.0.0.4 interface GigabitEthernet1/17
Switch(config)# end
Disabling IPSG with Static Hosts: Example
This example shows how to stop IPSG with static hosts on an interface:
Switch(config-if)# no ip verify source
Switch(config-if)# no ip device tracking max
Purpose
Returns to privileged EXEC mode.
Verifies the configuration and displays IPSG permit
ACLs for static hosts.
Verifies the configuration by displaying the IP-to-MAC
binding for a given host on the switch interface.

all active—Displays only the active IP or MAC
binding entries

all inactive—Displays only the inactive IP or MAC
binding entries

all—Displays the active and inactive IP or MAC
binding entries
Purpose
Displays the active IP or MAC binding entries for all interfaces.
Displays the IP source bindings on a switch.
Displays the IP source guard configuration on the switch.
Saves your entries in the configuration file.
421