Cisco WS-CBS3032-DEL Software Configuration Manual page 573

Chapter 22 Configuring DHCP Features and IP Source Guard
Command
Step 10
exit
Step 11
interface fastEthernet interface-id
Step 12 switchport mode private-vlan host
Step 13 switchport private-vlan host-association vlan-id1
vlan-id2
Step 14 ip device tracking maximum number
Step 15 ip verify source tracking [port-security]
Step 16 end
Step 17 show ip device tracking all
Step 18
show ip verify source interface interface-id
This example shows how to enable IPSG for static hosts with IP filters on a private VLAN host port:
Switch(config)# vlan 200
Switch(config-vlan)# private-vlan primary
Switch(config-vlan)# exit
Switch(config)# vlan 201
Switch(config-vlan)# private-vlan isolated
Switch(config-vlan)# exit
Switch(config)# vlan 200
Switch(config-vlan)# private-vlan association 201
Switch(config-vlan)# exit
Switch(config)# int gigabitethernet1/0/3
Switch(config-if)# switchport mode private-vlan host
Switch(config-if)# switchport private-vlan host-association 200 201
Switch(config-if)# ip device tracking maximum 8
Switch(config-if)# ip verify source tracking
Switch# show ip device tracking all
IP Device Tracking = Enabled
IP Device Tracking Probe Count = 3
IP Device Tracking Probe Interval = 30
---------------------------------------------------------------------
IP Address
---------------------------------------------------------------------
40.1.1.24
40.1.1.20
40.1.1.21
40.1.1.22
40.1.1.23
OL-13270-06
MAC Address Vlan Interface
0000.0000.0304 200 GigabitEthernet1/0/3
0000.0000.0305 200 GigabitEthernet1/0/3
0000.0000.0306 200 GigabitEthernet1/0/3
0000.0000.0307 200 GigabitEthernet1/0/3
0000.0000.0308 200 GigabitEthernet1/0/3
Cisco Catalyst Blade Switch 3130 and 3032 for Dell Software Configuration Guide
Purpose
Exit VLAN configuration mode.
Enter interface configuration mode.
(Optional) Establish a port as a private VLAN host.
(Optional) Associate this port with the corresponding
private VLAN.
Establish a maximum for the number of static IPs that
the IP device tracking table allows on the port.
The maximum is 10.
You must globally configure the ip device
Note
tracking maximum number interface command
for IPSG for static hosts to work.
Activate IPSG for static hosts with MAC address
filtering on this port.
Exit configuration interface mode.
Verify the configuration.
Verify the IP source guard configuration. Display IPSG
permit ACLs for static hosts.
STATE
ACTIVE
Configuring IP Source Guard
ACTIVE
ACTIVE
ACTIVE
ACTIVE
22-25