Cisco Catalyst 2960 Software Configuration Manual page 542

Configuring IP Source Guard
Command
Step 11
show ip verify source interface interface-id
Step 12
show ip device track all
[active | inactive] count
This example shows how to stop IPSG with static hosts on an interface.
Switch(config-if)# no ip verify source
Switch(config-if)# no ip device tracking max
This example shows how to enable IPSG with static hosts on a port.
Switch(config)# ip device tracking
Switch(config)# ip device tracking max 10
Switch(config-if)# ip verify source tracking port-security
This example shows how to enable IPSG for static hosts with IP filters on a Layer 2 access port and to
verify the valid IP bindings on the interface Gi0/3:
Switch# configure terminal
Enter configuration commands, one per line.
Switch(config)# ip device tracking
Switch(config)# interface gigabitethernet 0/3
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 10
Switch(config-if)# ip device tracking maximum 5
Switch(config-if)# ip verify source tracking
Switch(config-if)# end
Switch# show ip verify source
Interface
---------
Gi0/3
Gi0/3
Gi0/3
This example shows how to enable IPSG for static hosts with IP-MAC filters on a Layer 2 access port,
to verify the valid IP-MAC bindings on the interface Gi0/3, and to verify that the number of bindings on
this interface has reached the maximum:
Switch# configure terminal
Enter configuration commands, one per line.
Switch(config)# ip device tracking
Switch(config)# interface gigabitethernet 0/3
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 1
Switch(config-if)# ip device tracking maximum 5
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security maximum 5
Switch(config-if)# ip verify source tracking port-security
Switch(config-if)# end
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
20-18
Filter-type Filter-mode
----------- -----------
ip trk active
ip trk active
ip trk active
Chapter 20 Configuring DHCP and IP Source Guard Features
Purpose
Verify the configuration and display IPSG permit ACLs
for static hosts.
Verify the configuration by displaying the IP-to-MAC
binding for a given host on the switch interface.
• all active—display only the active IP or MAC
binding entries
all inactive—display only the inactive IP or MAC
•
binding entries
all—display the active and inactive IP or MAC
•
binding entries
End with CNTL/Z.
IP-address Mac-address
--------------- -----------------
40.1.1.24
40.1.1.20
40.1.1.21
End with CNTL/Z.
Vlan
----
10
10
10
OL-26520-01