Cisco Catalyst 4500 series Administration Manual page 1405

Chapter 53 Configuring DHCP Snooping, IP Source Guard, and IPSG for Static Hosts
Switch(config-vlan)# private-vlan isolated
Switch(config-vlan)# exit
Switch(config)# vlan 200
Switch(config-vlan)# private-vlan association 201
Switch(config-vlan)# exit
Switch(config)# int fastEthernet 4/3
Switch(config-if)# switchport mode private-vlan host
Switch(config-if)# switchport private-vlan host-association 200 201
Switch(config-if)# ip device tracking maximum 8
Switch(config-if)# ip verify source tracking
Switch# show ip device tracking all
IP Device Tracking = Enabled
IP Device Tracking Probe Count = 3
IP Device Tracking Probe Interval = 30
---------------------------------------------------------------------
IP Address
---------------------------------------------------------------------
40.1.1.24
40.1.1.20
40.1.1.21
40.1.1.22
40.1.1.23
The output shows the five valid IP-to-MAC bindings that have been learned on the interface Fa4/3. For
the PVLAN, the bindings are associated with primary VLAN ID. In this example, the primary VLAN
ID, 200, is shown in the table.
Switch# show ip verify source
Interface
---------
Fa4/3
Fa4/3
Fa4/3
Fa4/3
Fa4/3
Fa4/3
Fa4/3
Fa4/3
Fa4/3
Fa4/3
The output shows that the five valid IP-to-MAC bindings are on both the primary and secondary VLAN.
OL_28731-01
MAC Address Vlan
0000.0000.0304 200
0000.0000.0305 200
0000.0000.0306 200
0000.0000.0307 200
0000.0000.0308 200
Filter-type Filter-mode
----------- -----------
ip trk active
ip trk active
ip trk active
ip trk active
ip trk active
ip trk active
ip trk active
ip trk active
ip trk active
ip trk active
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
Configuring IP Source Guard for Static Hosts
Interface
FastEthernet4/3
FastEthernet4/3
FastEthernet4/3
FastEthernet4/3
FastEthernet4/3
IP-address Mac-address
--------------- -----------------
40.1.1.23
40.1.1.24
40.1.1.20
40.1.1.21
40.1.1.22
40.1.1.23
40.1.1.24
40.1.1.20
40.1.1.21
40.1.1.22
STATE
ACTIVE
ACTIVE
ACTIVE
ACTIVE
ACTIVE
Vlan
----
200
200
200
200
200
201
201
201
201
201
53-29