Cisco Catalyst 4500 Series Command Reference Manual page 795

Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
This output appears when you enter the show ip verify source interface fa6/4 command and the
•
interface fa6/4 has an IP source filter mode that is configured as IP MAC and the existing IP MAC
that binds 10.0.0.2/aaaa.bbbb.cccc on VLAN 10 and 11.0.0.1/aaaa.bbbb.cccd on VLAN 11:
Interface
---------
fa6/4
fa6/4
fa6/4
• This output appears when you enter the show ip verify source interface fa6/5 command and the
interface fa6/5 has IP source filter mode that is configured as IP MAC and existing IP MAC binding
10.0.0.3/aaaa.bbbb.ccce on VLAN 10, but port security is not enabled on fa6/5:
Interface
---------
fa6/5
fa6/5
Note
• This output appears when you enter the show ip verify source interface fa6/6 command and the
interface fa6/6 does not have IP source filter mode that is configured:
DHCP security is not configured on the interface fa6/6.
This example shows how to display all the interfaces on the switch that have DHCP snooping security
and IP Port Security tracking enabled with the show ip verify source command.
The output is an accumulation of per-interface show CLIs:
Interface
---------
fa6/1
fa6/1
fa6/2
Fa6/3
Fa6/3
Fa6/3
fa6/4
fa6/4
fa6/4
fa6/5
fa6/5
OL-25342 -01
Filter-type Filter-mode
----------- -----------
ip-mac active
ip-mac active
ip-mac active
Filter-type Filter-mode
----------- -----------
ip-mac active
ip-mac active
Enable port security first because the DHCP security MAC filter cannot apply to the port or
VLAN.
Filter-type Filter-mode
----------- -----------
ip active
ip active
ip inactive-trust-port
ip trk active
ip trk active
ip trk active
ip-mac active
ip-mac active
ip-mac active
ip-mac active
ip-mac active
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.3.0SG and IOS 15.1(1)SG)
IP-address Mac-address
--------------- --------------
10.0.0.2 aaaa.bbbb.cccc
11.0.0.1 aaaa.bbbb.cccd
deny-all deny-all
IP-address Mac-address
--------------- --------------
10.0.0.3 permit-all
deny-all permit-all
IP-address Mac-address
--------------- --------------
10.0.0.1
deny-all
40.1.1.24
40.1.1.20
40.1.1.21
10.0.0.2 aaaa.bbbb.cccc
11.0.0.1 aaaa.bbbb.cccd
deny-all deny-all
10.0.0.3 permit-all
deny-all permit-all
show ip verify source
Vlan
---------
10
11
12-20
Vlan
---------
10
11-20
Vlan
---------
10
11-20
10
10
10
10
11
12-20
10
11-20
2-737