Configuring Ipsg For Static Hosts On A Pvlan Host Port - Cisco Catalyst 4500 Series Software Configuration Manual

Configuring IP Source Guard for Static Hosts
The following example displays all inactive IP-to-MAC binding entries for all interfaces. The host was
first learned on GigabitEthernet 3/1 then moved to GigabitEthernet 4/1. The IP-to-MAC binding entries
learned on GigabitEthernet 3/1 are marked as inactive.
Switch# show ip device tracking all inactive
IP Device Tracking = Enabled
IP Device Tracking Probe Count = 3
IP Device Tracking Probe Interval = 30
---------------------------------------------------------------------
IP Address
---------------------------------------------------------------------
200.1.1.8
200.1.1.9
200.1.1.10
200.1.1.1
200.1.1.2
200.1.1.3
200.1.1.4
200.1.1.5
200.1.1.6
200.1.1.7
The following example display the count of all IP device tracking host entries for all interfaces:
Switch# show ip device tracking all count
Total IP Device Tracking Host entries: 5
---------------------------------------------------------------------
Interface
---------------------------------------------------------------------
Fa4/3

Configuring IPSG for Static Hosts on a PVLAN Host Port

You can configure IPSG for static hosts on a PVLAN host port.
To enable IPSG for static hosts with IP filters on a PVLAN host port, perform this task:
Command
Step 1
Switch(config)# vlan n1
Step 2
Switch(config-vlan)# private-vlan primary
Step 3
Switch(config-vlan)# exit
Step 4
Switch(config)# vlan n2
Step 5
Switch(config-vlan)# private-vlan isolated
Step 6
Switch(config-vlan)# exit
Step 7
Switch(config)# vlan n1
Step 8
Switch(config-vlan)# private-vlan association 201
Step 9
Switch(config-vlan)# exit
Step 10
Switch(config)# interface fastEthernet a/b
Step 11
Switch(config-if)# switchport mode private-vlan
host
Step 12
Switch(config-if)# switchport private-vlan
host-association a b
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
60-28
Chapter 60
MAC Address Vlan Interface
0001.0600.0000 8 GigabitEthernet3/1
0001.0600.0000 8 GigabitEthernet3/1
0001.0600.0000 8 GigabitEthernet3/1
0001.0600.0000 8 GigabitEthernet3/1
0001.0600.0000 8 GigabitEthernet3/1
0001.0600.0000 8 GigabitEthernet3/1
0001.0600.0000 8 GigabitEthernet3/1
0001.0600.0000 8 GigabitEthernet3/1
0001.0600.0000 8 GigabitEthernet3/1
0001.0600.0000 8 GigabitEthernet3/1
Maximum Limit
5
Configuring DHCP Snooping, IP Source Guard, and IPSG for Static Hosts
STATE
INACTIVE
INACTIVE
INACTIVE
INACTIVE
INACTIVE
INACTIVE
INACTIVE
INACTIVE
INACTIVE
INACTIVE
Number of Entries
Purpose
Enters configuration VLAN mode.
Establishes a primary VLAN on a PVLAN port.
Exits VLAN configuration mode.
Enters configuration VLAN mode.
Establishes an isolated VLAN on a PVLAN port.
Exits VLAN configuration mode.
Enters configuration VLAN mode.
Associates the VLAN on an isolated PVLAN port.
Exits VLAN configuration mode.
Enters interface configuration mode.
(Optional) Establishes a port as a PVLAN host.
(Optional) Associates this port with the corresponding
PVLAN.