Ip Verify Source - Cisco Catalyst 4500 Series Command Reference Manual

Cisco ios command reference
Hide thumbs Also See for Catalyst 4500 Series:
Table of Contents

Advertisement

ip verify source

ip verify source
To enable IP source guard on untrusted Layer 2 interfaces, use the ip verify source command. To disable
IP source guard on untrusted Layer 2 interfaces, use the no form of this command.
Syntax Description
vlan dhcp-snooping
tracking
port-security
Defaults
IP source guard is disabled.
Command Modes
Global configuration mode
Command History
Release
12.1(19)EW
12.2(37)SG
Examples
This example shows how to enable IP source guard on VLANs 10 through 20 on a per-port basis:
Switch# configure terminal
Enter configuration commands, one per line.
Switch(config)# ip dhcp snooping
Switch(config)# ip dhcp snooping vlan 10 20
Switch(config)# interface fastethernet6/1
Switch(config-if)# switchport trunk encapsulation dot1q
Switch(config-if)# switchport mode trunk
Switch(config-if)# switchport trunk native vlan 10
Switch(config-if)# switchport trunk allowed vlan 11-20
Switch(config-if)# no ip dhcp snooping trust
Switch(config-if)# ip verify source vlan dhcp-snooping
Switch(config)# end
Switch# show ip verify source interface f6/1
Interface
---------
Fa6/1
Fa6/1
Switch#
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.3.0SG and IOS 15.1(1)SG)
2-334
ip verify source {vlan dhcp-snooping | tracking} [port-security]
no ip verify source {vlan dhcp-snooping | tracking} [port-security]
Enables IP source guard on untrusted Layer 2 DHCP snooping interfaces.
Enables IP port security to learn static IP address learning on a port.
(Optional) Filters both source IP and MAC addresses using the port
security feature.
Modification
Support for this command was introduced on the Catalyst 4500 series switch.
Added support for IP port security and tracking.
Filter-type
Filter-mode
-----------
-----------
ip-mac
active
ip-mac
active
Chapter 2
Cisco IOS Commands for the Catalyst 4500 Series Switches
End with CNTL/Z.
IP-address
Mac-address
---------------
-----------------
10.0.0.1
deny-all
Vlan
----------
10
11-20
OL-25342 -01

Advertisement

Table of Contents
loading

Table of Contents