Cisco Catalyst 2960-XR User Manual

How to Configure IP Source Guard
Enabling IP Source Guard
SUMMARY STEPS
1.
configure terminal
2.
interface interface-id
3.
ip verify source [mac-check ]
4.
exit
5.
ip source binding mac-address vlan vlan-id ip-address interface interface-id
6.
end
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Specifies the interface to be configured, and enters
interface configuration mode.
interface interface-id
Example:
Switch(config)# interface gigabitethernet 1/0/1
Step 2
Enables IP source guard with source IP address filtering.ip verify source [mac-check ]
Step 3
Example:
Switch(config-if)# ip verify source
(Optional) mac-check—Enables IP Source Guard with
source IP address and MAC address filtering.
Returns to global configuration mode.exit
Example:
Switch(config-if)# exit
Step 4
Adds a static IP source binding.
ip source binding mac-address vlan vlan-id ip-address
interface interface-id
Step 5
Enter this command for each static binding.
Example:
Switch(config)# ip source binding 0100.0230.0002
vlan 11 10.0.0.4 interface gigabitethernet1/0/1
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
188 OL-29434-01
Configuring IP Source Guard
How to Configure IP Source Guard

Cisco Catalyst 2960-XR Specifications

General

Stacking Bandwidth	80 Gbps
Layer Support	Layer 2 and Layer 3
Jumbo Frame Support	9198 bytes
RAM	512 MB
Input Voltage	100-240V AC
Model	Catalyst 2960-XR
Uplink Interfaces	4 x 1G SFP or 2 x 10G SFP+
Downlink Interfaces	24 or 48 x Gigabit Ethernet ports
Power Supply	Internal
MAC Address Table Size	16, 000 entries
PoE	Available on PoE models
Weight	4.5 kg
Features	energy efficiency
Stacking	Up to 8 switches
Operating Temperature	0 to 45°C