Configuring Ip Source Guard For Static Hosts - Cisco Catalyst 2960 Software Configuration Manual
Hide thumbs
Also See for Catalyst 2960:
- Configuration manual (2288 pages) ,
- Command reference manual (800 pages) ,
- Hardware installation manual (108 pages)
Table of Contents
Advertisement
Chapter 20
Configuring DHCP and IP Source Guard Features
Configuring IP Source Guard for Static Hosts
•
Configuring IP Source Guard for Static Hosts on a Layer 2 Access Port
You must configure the ip device tracking maximum limit-number interface configuration command
Note
globally for IPSG for static hosts to work. If you only configure this command on a port without enabling
IP device tracking globally or by setting an IP device tracking maximum on that interface, IPSG with
static hosts rejects all the IP traffic from that interface
Beginning in privileged EXEC mode:
Command
Step 1
configure terminal
Step 2
ip device tracking
Step 3
interface interface-id
Step 4
switchport mode access
Step 5
switchport access vlan vlan-id
Step 6
ip verify source tracking port-security
Step 7
ip device tracking maximum number
Step 8
switchport port-security
Step 9
switchport port-security maximum value
Step 10
end
OL-26520-01
Configuring IP Source Guard for Static Hosts on a Layer 2 Access Port, page 20-17
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
Purpose
Enter global configuration mode.
Turn on the IP host table, and globally enable IP device
tracking.
Enter interface configuration mode.
Configure a port as access.
Configure the VLAN for this port.
Enable IPSG for static hosts with MAC address filtering.
When you enable both IP source guard and port
Note
security by using the ip verify source
port-security interface configuration command:
The DHCP server must support option 82, or
•
the client is not assigned an IP address.
The MAC address in the DHCP packet is not
•
learned as a secure address. The MAC address
of the DHCP client is learned as a secure
address only when the switch receives
non-DHCP data traffic.
Establish a maximum limit for the number of static IPs
that the IP device tracking table allows on the port. The
range is 1to 10. The maximum number is 10.
You must configure the ip device tracking
Note
maximum limit-number interface configuration
command.
(Optional) Activate port security for this port.
(Optional) Establish a maximum of MAC addresses for
this port.
Return to privileged EXEC mode.
Configuring IP Source Guard
20-17
Hide quick links:
Advertisement
Chapters
Table of Contents
Troubleshooting
