Cisco Catalyst 3560-X Software Configuration Manual page 674
Hide thumbs
Also See for Catalyst 3560-X:
- Command reference manual (1188 pages) ,
- Software configuration manual (1438 pages) ,
- Manual (276 pages)
Table of Contents
Advertisement
Configuring IP Source Guard
Command
Step 11
show ip verify source interface interface-id
Step 12
show ip device track all
[active | inactive] count
This example shows how to stop IPSG with static hosts on an interface.
Switch(config-if)# no ip verify source
Switch(config-if)# no ip device tracking max
This example shows how to enable IPSG with static hosts on a port.
Switch(config)# ip device tracking
Switch(config)# ip device tracking max 10
Switch(config-if)# ip verify source tracking port-security
This example shows how to enable IPSG for static hosts with IP filters on a Layer 2 access port and to
verify the valid IP bindings on the interface Gi1/0/3:
Switch# configure terminal
Enter configuration commands, one per line.
Switch(config)# ip device tracking
Switch(config)# interface gigabitethernet1/0/3
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 10
Switch(config-if)# ip device tracking maximum 5
Switch(config-if)# ip verify source tracking
Switch(config-if)# end
Switch# show ip verify source
Interface
---------
Gi1/0/3
Gi1/0/3
Gi1/0/3
This example shows how to enable IPSG for static hosts with IP-MAC filters on a Layer 2 access port,
to verify the valid IP-MAC bindings on the interface Gi1/0/3, and to verify that the number of bindings
on this interface has reached the maximum:
Switch# configure terminal
Enter configuration commands, one per line.
Switch(config)# ip device tracking
Switch(config)# interface gigabitethernet1/0/3
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 1
Switch(config-if)# ip device tracking maximum 5
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security maximum 5
Switch(config-if)# ip verify source tracking port-security
Switch(config-if)# end
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
1-22
Filter-type
Filter-mode
-----------
-----------
ip trk
active
ip trk
active
ip trk
active
Chapter 1
Configuring DHCP Features and IP Source Guard
Purpose
Verify the configuration and display IPSG permit ACLs
for static hosts.
Verify the configuration by displaying the IP-to-MAC
binding for a given host on the switch interface.
•
all active—display only the active IP or MAC
binding entries
all inactive—display only the inactive IP or MAC
•
binding entries
all—display the active and inactive IP or MAC
•
binding entries
End with CNTL/Z.
IP-address
Mac-address
---------------
-----------------
40.1.1.24
40.1.1.20
40.1.1.21
End with CNTL/Z.
Vlan
----
10
10
10
OL-25303-03
Advertisement
Table of Contents
Troubleshooting
