Configuring Ip Source Guard For Static Hosts On A Layer 2 Access Port - Cisco IE-4000 Software Configuration Manual

Configuring IP Source Guard
How to Configure IP Source Guard
Command
4. exit
5. ip source binding mac-address vlan
vlan-id ip-address inteface interface-id
6. end

Configuring IP Source Guard for Static Hosts on a Layer 2 Access Port

Command
1. configure terminal
2. ip device tracking
3. interface interface-id
4. switchport mode access
5. switchport access vlan vlan-id
6. ip verify source tracking port-security
7. ip device tracking maximum number
8. switchport port-security
9. switchport port-security maximum value
Purpose
Returns to global configuration mode.
Adds a static IP source binding.
Enter this command for each static binding.
Returns to privileged EXEC mode.
Purpose
Enters global configuration mode.
Opens the IP host table, and globally enables IP device
tracking.
Enters interface configuration mode.
Configures a port as access.
Configures the VLAN for this port.
Enables IPSG for static hosts with MAC address filtering.
Note: When you enable both IPSG and port security by
using the ip verify source port-security interface
configuration command:
• The DHCP server must support option-82, or
the client is not assigned an IP address.
• The MAC address in the DHCP packet is not
learned as a secure address. The MAC address
of the DHCP client is learned as a secure
address only when the switch receives
non-DHCP data traffic.
Specifies a maximum limit for the number of static IPs
that the IP device tracking table allows on the port. The
range is 1to 10. The maximum number is 10.
Note: You must configure the ip device tracking
maximum limit-number interface configuration
command.
(Optional) Activates port security for this port.
(Optional) Specifies a maximum of MAC addresses for
this port.
420