Cisco 300 Series User Manual

DHCP Snooping Commands
OL-32830-01 Command Line Interface Reference Guide 320
13
13.12 ip source-guard
Use the ip source-guard command in Configuration mode or Interface
Configuration mode to enable IP Source Guard globally on a device or in Interface
Configuration (Ethernet, Port-channel) mode to enable IP Source Guard on an
interface.
Use the no form of this command to disable IP Source Guard on the device or on
an interface.
Syntax
ip source-guard
no ip source-guard
Parameters
N/A
Default Configuration
IP Source Guard is disabled.
Command Mode
Interface (Ethernet, Port Channel) Configuration mode
User Guidelines
IP Source Guard must be enabled globally before enabling IP Source Guard on an
interface.
IP Source Guard is active only on DHCP snooping untrusted interfaces, and if at
least one of the interface VLANs are DHCP snooping enabled.
Example
The following example enables IP Source Guard on gi14.
switchxxxxxx(config)# interface gi1 4
switchxxxxxx(config-if)# ip source-guard

Cisco 300 Series Specifications

General

Model	Cisco 300 Series
Category	Switch
Dimensions	Varies by model
Weight	Varies by model
Power over Ethernet (PoE)	Available on select models
Management	Web-based GUI, SNMP, CLI
VLANs	Up to 256
Security Features	ACLs, 802.1X, Port Security
Humidity	10% to 90% non-condensing
Ports	8, 16, 24, 48