Table of Contents
Advertisement
Configuring IPv4 IMPB
5.2.4 Using the CLI
1) Manually bind the IP address, MAC address, VLAN ID and connected port number of the
legal host, and apply this entry to the IP Source Guard feature.
Switch#configure
Switch(config)#ip source binding legal-host 192.168.0.100 74:d3:45:32:b5:6d vlan 1
interface fastEthernet 1/0/1 ip-verify-source
2) Enable the log feature and IP Source Guard on ports 1/0/1-3.
Switch(config)# ip verify source logging
Switch(config)# interface range fastEthernet 1/0/1-3
Switch(config-if-range)#ip verify source sip+mac
Switch(config-if-range)#end
Switch#copy running-config startup-config
Verify the Configuration
Verify the binding entry:
Switch#show ip source binding
U
Host
-
----
1
User1
Notice:
1.Here, 'ARP-D' for 'ARP-Detection',and'IP-V-S' for 'IP-Verify-Source'.
Verify the configuration of IP Source Guard:
Switch#show ip verify source
IP Source Guard log: Enabled
Port
Security-Type
Fa1/0/1
Fa1/0/2
Fa1/0/3
...
IP-Addr
-------
192.168.0.100
LAG
SIP+MAC
N/A
SIP+MAC
N/A
SIP+MAC
N/A
MAC-Addr
VID Port
--------
74:d3:45:32:b5:6d
Configuration Examples
ACL
---
----
---
1
Fa1/0/1
IP-V-S
Configuration Guide
SOURCE
------
Manual
645
Advertisement
Table of Contents
