Cisco Catalyst 2960-XR Security Configuration Manual page 214

Configuring IP Source Guard for Static Hosts on a Layer 2 Access Port
---------
Gi1/0/3
This example displays all IP or MAC binding entries for all interfaces. The CLI displays all active as well as
inactive entries. When a host is learned on a interface, the new entry is marked as active. When the same host
is disconnected from that interface and connected to a different interface, a new IP or MAC binding entry
displays as active as soon as the host is detected. The old entry for this host on the previous interface is marked
as INACTIVE.
Switch# show ip device tracking all
IP Device Tracking for wireless clients = Enabled
Global IP Device Tracking for wired clients = Enabled
Global IP Device Tracking Probe Count = 3
Global IP Device Tracking Probe Interval = 30
-----------------------------------------------------------------------------------------------
IP Address
-----------------------------------------------------------------------------------------------
200.1.1.8
200.1.1.9
200.1.1.10
200.1.1.1
200.1.1.1
200.1.1.2
200.1.1.2
200.1.1.3
200.1.1.3
200.1.1.4
200.1.1.4
200.1.1.5
200.1.1.5
200.1.1.6
200.1.1.7
This example displays all active IP or MAC binding entries for all interfaces:
Switch# show ip device tracking all active
IP Device Tracking for wireless clients = Enabled
Global IP Device Tracking for wired clients = Enabled
Global IP Device Tracking Probe Count = 3
Global IP Device Tracking Probe Interval = 30
-----------------------------------------------------------------------------------------------
IP Address
-----------------------------------------------------------------------------------------------
200.1.1.1
200.1.1.2
200.1.1.3
200.1.1.4
200.1.1.5
This example displays all inactive IP or MAC binding entries for all interfaces. The host was first learned on
GigabitEthernet 1/0/1 and then moved to GigabitEthernet 0/2. the IP or MAC binding entries learned on
GigabitEthernet1/ 0/1 are marked as inactive.
Switch# show ip device tracking all inactive
IP Device Tracking for wireless clients = Enabled
Global IP Device Tracking for wired clients= Enabled
Global IP Device Tracking Probe Count = 3
Global IP Device Tracking Probe Interval = 30
-----------------------------------------------------------------------------------------------
IP Address
-----------------------------------------------------------------------------------------------
200.1.1.8
200.1.1.9
200.1.1.10
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
192
----------- -----------
ip trk active
MAC Address Vlan
0001.0600.0000 8
0001.0600.0000 8
0001.0600.0000 8
0001.0600.0000 9
0001.0600.0000 8
0001.0600.0000 9
0001.0600.0000 8
0001.0600.0000 9
0001.0600.0000 8
0001.0600.0000 9
0001.0600.0000 8
0001.0600.0000 9
0001.0600.0000 8
0001.0600.0000 8
0001.0600.0000 8
MAC Address Vlan
0001.0600.0000 9
0001.0600.0000 9
0001.0600.0000 9
0001.0600.0000 9
0001.0600.0000 9
MAC Address Vlan
0001.0600.0000 8
0001.0600.0000 8
0001.0600.0000 8
--------------- -----------------
deny-all
Interface Probe-Timeout
GigabitEthernet1/0/1
GigabitEthernet1/0/1
GigabitEthernet1/0/1
GigabitEthernet1/0/2
GigabitEthernet1/0/1
GigabitEthernet1/0/2
GigabitEthernet1/0/1
GigabitEthernet1/0/2
GigabitEthernet1/0/1
GigabitEthernet1/0/2
GigabitEthernet1/0/1
GigabitEthernet1/0/2
GigabitEthernet1/0/1
GigabitEthernet1/0/1
GigabitEthernet1/0/1
Interface Probe-Timeout
GigabitEthernet1/0/1
GigabitEthernet1/0/1
GigabitEthernet1/0/1
GigabitEthernet1/0/1
GigabitEthernet1/0/1
Interface Probe-Timeout
GigabitEthernet1/0/1
GigabitEthernet1/0/1
GigabitEthernet1/0/1
Configuring IP Source Guard
----
1
STATE
INACTIVE
INACTIVE
INACTIVE
ACTIVE
INACTIVE
ACTIVE
INACTIVE
ACTIVE
INACTIVE
ACTIVE
INACTIVE
ACTIVE
INACTIVE
INACTIVE
INACTIVE
STATE
ACTIVE
ACTIVE
ACTIVE
ACTIVE
ACTIVE
STATE
INACTIVE
INACTIVE
INACTIVE
OL-29434-01