Show Ip Verify Source - Cisco Catalyst Blade Switch 3130 Reference Manual

Chapter 2 Cisco Catalyst Blade Switch 3130 for Dell Cisco IOS Commands

show ip verify source

Use the show ip verify source user EXEC command to display the IP source guard configuration on the
switch or on a specific interface.
Syntax Description
interface interface-id
| begin
| exclude
| include
expression
Command Modes
User EXEC
Command History Release
12.2(40)EX1
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output
do not appear, but the lines that contain Output appear.
Examples This is an example of output from the show ip verify source command:
Switch> show ip verify source
Interface
---------
gi1/0/1
gi1/0/1
gi1/0/2
gi1/0/3
gi1/0/4
gi1/0/4
gi1/0/4
gi1/0/5
gi1/0/5
In the previous example, this is the IP source guard configuration:
•
•
•
OL-13271-01
show ip verify source [interface interface-id] [ | {begin | exclude | include} expression]
(Optional) Display IP source guard configuration on a specific interface.
(Optional) Display begins with the line that matches the expression.
(Optional) Display excludes lines that match the expression.
(Optional) Display includes lines that match the specified expression.
Expression in the output to use as a reference point.
Modification
This command was introduced.
Filter-type Filter-mode
----------- -----------
ip active
ip active
ip inactive-trust-port
ip inactive-no-snooping-vlan
ip-mac active
ip-mac active
ip-mac active
ip-mac active
ip-mac active
On the Gigabit Ethernet 1/0/1 interface, DHCP snooping is enabled on VLANs 10 to 20. For
VLAN 10, IP source guard with IP address filtering is configured on the interface, and a binding
exists on the interface. For VLANs 11 to 20, the second entry shows that a default port access control
lists (ACLs) is applied on the interface for the VLANs on which IP source guard is not configured.
The Gigabit Ethernet 1/0/2 interface is configured as trusted for DHCP snooping.
On the Gigabit Ethernet 1/0/3 interface, DHCP snooping is not enabled on the VLANs to which the
interface belongs.
IP-address Mac-address
--------------- --------------
10.0.0.1
deny-all
10.0.0.2 aaaa.bbbb.cccc
11.0.0.1 aaaa.bbbb.cccd
deny-all deny-all
10.0.0.3 permit-all
deny-all permit-all
Cisco Catalyst Blade Switch 3130 for Dell Command Reference
show ip verify source
Vlan
---------
10
11-20
10
11
12-20
10
11-20
2-485