D-Link DXS-3600 Series Reference Manual page 593

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
Default
None.
Command Mode
User EXEC or Any Configuration Mode.
Command Default Level
Level: 1.
Usage Guideline
Use this command to display the hardware port ACL entries for a port in the hardware table. It indicates
the hardware filter behavior that IP source guard is verified upon.
Example
This example shows how to display when DHCP snooping is enabled on VLANs 100 to 110, the interface
with IP source filter mode that is configured as IP, and that there is an existing IP address binding
10.1.1.1 on VLAN 100.
Switch# show ip verify source interface eth3/0/3
Interface
---------
eth3/0/3
eth3/0/3
Total Entries: 2
Switch#
This example shows how to display when the interface has an IP source filter mode that is configured as
IP MAC and an existing IP MAC that binds IP address 10.1.1.10 to MAC address 00-01-01-01-01-01 on
VLAN 100 and IP address 10.1.1.11 to MAC address 00-01-01-01-01-10 on VLAN 101.
Switch# show ip verify source interface eth3/0/3
Interface
---------
eth3/0/3
eth3/0/3
eth3/0/3
Total Entries: 3
Switch#
Display Parameters
Interface
Filter-type
Filter-Mode
Filter-type Filter-mode IP address
----------- ----------- ---------------
ip active
ip active
Filter-type Filter-mode
----------- -----------
ip-mac active
ip-mac active
ip-mac active
The interface that has IP inspection enabled.
The type of IP Source Guard in operation.
ip: Just use an IP address to authorize IP packets.
ip-mac: Use the IP and MAC address to authorize IP packets.
active: Actively verify IP source entries.
inactive-trust-port: Enable DHCP snooping to trust ports with no IP
MAC address
----------------- -------
10.1.1.1
deny-all
IP address MAC address
--------------- ----------------- -------
10.1.1.10
10.1.1.11
deny-all
593
VLAN
100
101-120
VLAN
00-01-01-01-01-01 100
00-01-01-01-01-10 101
- 102-120