Show Ip Verify Source - Cisco ME 3400 Command Reference Manual

Chapter 2 Cisco ME 3400 Ethernet Access Switch Cisco IOS Commands

show ip verify source

Use the show ip verify source user EXEC command to display the IP source guard configuration on the
switch or on a specific interface.
Syntax Description interface interface-id
| begin
| exclude
| include
expression
Command Modes
User EXEC
Command History Release
12.2(25)EX
12.2(50)SE
Examples This is an example of output from the show ip verify source command:
Switch> show ip verify source
Interface
---------
fa0/1
fa0/1
fa0/2
fa0/3
fa0/4
fa0/4
fa0/4
fa0/5
fa0/5
In the previous example, this is the IP source guard configuration:
•
•
•
OL-9640-10
show ip verify source [interface interface-id] [ | {begin | exclude | include} expression]
(Optional) Display IP source guard configuration on a specific interface.
(Optional) Display begins with the line that matches the expression.
(Optional) Display excludes lines that match the expression.
(Optional) Display includes lines that match the specified expression.
Expression in the output to use as a reference point.
Modification
This command was introduced.
The command was supported in the metro base image.
Filter-type Filter-mode
----------- -----------
ip active
ip active
ip inactive-trust-port
ip inactive-no-snooping-vlan
ip-mac active
ip-mac active
ip-mac active
ip-mac active
ip-mac active
On the Fast Ethernet 0/1 interface, dynamic host control protocol (DHCP) snooping is enabled on
VLANs 10 to 20. For VLAN 10, IP source guard with IP address filtering is configured on the
interface, and a binding is on the interface. For VLANs 11 to 20, the second entry shows that a
default port access control list (ACL) is applied on the interface for the VLANs on which IP source
guard is not configured.
The Fast Ethernet 0/2 interface is configured as trusted for DHCP snooping.
On the Fast Ethernet 0/3 interface, DHCP snooping is not enabled on the VLANs to which the
interface belongs.
IP-address Mac-address
--------------- --------------
10.0.0.1
deny-all
10.0.0.2 aaaa.bbbb.cccc
11.0.0.1 aaaa.bbbb.cccd
deny-all deny-all
10.0.0.3 permit-all
deny-all permit-all
Cisco ME 3400 Ethernet Access Switch Command Reference
show ip verify source
Vlan
---------
10
11-20
10
11
12-20
10
11-20
2-487