Displaying Ip Source Guard Information - Cisco Catalyst 3750-X Software Configuration Manual

Chapter 24 Configuring DHCP Features and IP Source Guard
This example shows how to enable IPSG for static hosts with IP filters on a private VLAN host port:
Switch(config)# vlan 200
Switch(config-vlan)# private-vlan primary
Switch(config-vlan)# exit
Switch(config)# vlan 201
Switch(config-vlan)# private-vlan isolated
Switch(config-vlan)# exit
Switch(config)# vlan 200
Switch(config-vlan)# private-vlan association 201
Switch(config-vlan)# exit
Switch(config)# int gigabitethernet1/0/3
Switch(config-if)# switchport mode private-vlan host
Switch(config-if)# switchport private-vlan host-association 200 201
Switch(config-if)# ip device tracking maximum 8
Switch(config-if)# ip verify source tracking
Switch# show ip device tracking all
IP Device Tracking = Enabled
IP Device Tracking Probe Count = 3
IP Device Tracking Probe Interval = 30
---------------------------------------------------------------------
IP Address
---------------------------------------------------------------------
40.1.1.24
40.1.1.20
40.1.1.21
40.1.1.22
40.1.1.23
The output shows the five valid IP-MAC bindings that have been learned on the interface Fa0/3. For the
private VLAN cases, the bindings are associated with primary VLAN ID. So, in this example, the
primary VLAN ID, 200, is shown in the table.
Switch# show ip verify source
Interface
---------
Gi1/0/3
Gi1/0/3
Gi1/0/3
Gi1/0/3
Gi1/0/3
Gi1/0/3
Gi1/0/3
Gi1/0/3
Gi1/0/3
Gi1/0/3
The output shows that the five valid IP-MAC bindings are on both the primary and secondary VLAN.

Displaying IP Source Guard Information

Table 24-3 Commands for Displaying IP Source Guard Information
Command
show ip source binding
show ip verify source
OL-21521-01
MAC Address Vlan
0000.0000.0304 200
0000.0000.0305 200
0000.0000.0306 200
0000.0000.0307 200
0000.0000.0308 200 GigabitEthernet1/0/3
Filter-type Filter-mode
----------- -----------
ip trk active
ip trk active
ip trk active
ip trk active
ip trk active
ip trk active
ip trk active
ip trk active
ip trk active
ip trk active
Purpose
Display the IP source bindings on a switch.
Display the IP source guard configuration on the switch.
Interface
GigabitEthernet1/0/3
GigabitEthernet1/0/3
GigabitEthernet1/0/3
GigabitEthernet1/0/3
IP-address Mac-address
--------------- -----------------
40.1.1.23
40.1.1.24
40.1.1.20
40.1.1.21
40.1.1.22
40.1.1.23
40.1.1.24
40.1.1.20
40.1.1.21
40.1.1.22
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
Displaying IP Source Guard Information
STATE
ACTIVE
ACTIVE
ACTIVE
ACTIVE
ACTIVE
Vlan
----
200
200
200
200
200
201
201
201
201
201
24-25