Cisco Catalyst 2928 Software Configuration Manual page 399

Chapter 19 Configuring DHCP Features and IP Source Guard Features
Command
Step 11
show ip verify source interface interface-id
Step 12
show ip device track all
[active | inactive] count
This example shows how to stop IPSG with static hosts on an interface.
Switch(config-if)# no ip verify source
Switch(config-if)# no ip device tracking max
This example shows how to enable IPSG with static hosts on a port.
Switch(config)# ip device tracking
Switch(config)# ip device tracking max 10
Switch(config-if)# ip verify source tracking port-security
This example shows how to enable IPSG for static hosts with IP filters on a Layer 2 access port and to
verify the valid IP bindings on the interface Gi0/3:
Switch# configure terminal
Enter configuration commands, one per line.
Switch(config)# ip device tracking
Switch(config)# interface gigabitethernet 0/3
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 10
Switch(config-if)# ip device tracking maximum 5
Switch(config-if)# ip verify source tracking
Switch(config-if)# end
Switch# show ip verify source
Interface
---------
Gi0/3
Gi0/3
Gi0/3
This example shows how to enable IPSG for static hosts with IP-MAC filters on a Layer 2 access port,
to verify the valid IP-MAC bindings on the interface Gi0/3, and to verify that the number of bindings on
this interface has reached the maximum:
Switch# configure terminal
Enter configuration commands, one per line.
Switch(config)# ip device tracking
Switch(config)# interface gigabitethernet 0/3
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 1
Switch(config-if)# ip device tracking maximum 5
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security maximum 5
Switch(config-if)# ip verify source tracking port-security
Switch(config-if)# end
OL-23389-01
Filter-type Filter-mode
----------- -----------
ip trk active
ip trk active
ip trk active
Purpose
Verify the configuration and display IPSG permit ACLs
for static hosts.
Verify the configuration by displaying the IP-to-MAC
binding for a given host on the switch interface.
• all active—display only the active IP or MAC
binding entries
all inactive—display only the inactive IP or MAC
•
binding entries
all—display the active and inactive IP or MAC
•
binding entries
End with CNTL/Z.
IP-address Mac-address
--------------- -----------------
40.1.1.24
40.1.1.20
40.1.1.21
End with CNTL/Z.
Catalyst 2928 Switch Software Configuration Guide
Configuring IP Source Guard
Vlan
----
10
10
10
19-19