Displaying Ip Source Binding Information - Cisco Catalyst 4500 series Administration Manual

Chapter 53 Configuring DHCP Snooping, IP Source Guard, and IPSG for Static Hosts
•
•
You can also use the show ip verify source command to display all interfaces on the switch that have IP
source guard enabled, as follows:
Switch# show ip verify source
Interface
---------
fa6/1
fa6/1
fa6/2
fa6/3
fa6/4
fa6/4
fa6/4
fa6/5
fa6/5

Displaying IP Source Binding Information

You can display all IP source bindings configured on all interfaces on a switch using the
show ip source binding command.
Switch# show ip source binding
MacAddress
------------------
00:02:B3:3F:3B:99
00:00:00:0A:00:0B
Switch#
Table 53-3
Table 53-3
Field
MAC Address
IP Address
Lease (seconds)
OL_28731-01
This example shows displayed PVACLs for a port configured for IP-to-MAC filtering but not for
port security:
Interface Filter-type
--------- -----------
fa6/5 ip-mac
fa6/5 ip-mac
The MAC filter shows permit-all because port security is not enabled, so the MAC filter
Note
cannot apply to the port or VLAN and is effectively disabled. Always enable port security
first.
This example shows displayed error message when entering the show ip verify source command on
a port that does not have an IP source filter mode configured:
IP Source Guard is not configured on the interface fa6/6.
Filter-type Filter-mode
----------- -----------
ip active
ip active
ip inactive-trust-port
ip inactive-no-snooping-vlan
ip-mac active
ip-mac active
ip-mac active
ip-mac active
ip-mac active
IpAddress
---------------
55.5.5.2
11.0.0.1
describes the fields in the show ip source binding command output.
show ip source binding Command Output
Description
Client hardware MAC address
Client IP address assigned from the DHCP server
IP address lease time
Filter-mode IP-address
----------- ---------------
active 10.0.0.3
active deny-all
IP-address
---------------
10.0.0.1
deny-all
10.0.0.2
11.0.0.1
deny-all
10.0.0.3
deny-all
Lease(sec) Type
---------- -------------
6522 dhcp-snooping
infinite static
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
Displaying IP Source Binding Information
Mac-address Vlan
-------------- ---------
permit-all 10
permit-all 11-20
Mac-address Vlan
-------------- ---------
10
11-20
aaaa.bbbb.cccc 10
aaaa.bbbb.cccd 11
deny-all 12-20
permit-all 10
permit-all 11-20
VLAN Interface
---- --------------------
10 FastEthernet6/10
10 FastEthernet6/10
53-23