Name: Cisco Catalyst 2960-XR
Brand: Cisco
Rating: 5 (1 reviews)

To Next Page

To Previous Page

PurposeCommand or Action

Returns to privileged EXEC mode.end

Example:

Switch(config)# end

Step 6

Enabling IP source guard with source IP and MAC filtering on VLANs 10 and 11

Switch# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Switch(config)# interface gigabitethernet 1/0/1

Switch(config-if)# ip verify source

Switch(config-if)# exit

Switch(config)# ip source binding 0100.0022.0010 vlan 10 10.0.0.2 interface gigabitethernet

1/0/1

Switch(config)# ip source binding 0100.0230.0002 vlan 11 10.0.0.4 interface gigabitethernet

1/0/1

Switch(config)# end

Configuring IP Source Guard for Static Hosts on a Layer 2 Access Port

You must configure the ip device tracking maximum limit-number interface configuration command globally

for IPSG for static hosts to work. If you only configure this command on a port without enabling IP device

tracking globally or by setting an IP device tracking maximum on that interface, IPSG with static hosts rejects

all the IP traffic from that interface.

SUMMARY STEPS

configure terminal

ip device tracking

interface interface-id

switchport mode access

switchport access vlan vlan-id

ip verify source[tracking] [mac-check ]

ip device tracking maximum number

end

Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1

OL-29434-01 189

Configuring IP Source Guard

Configuring IP Source Guard for Static Hosts on a Layer 2 Access Port

Other manuals for Cisco Catalyst 2960-XR

Questions and Answers:

Need help?

Do you have a question about the Cisco Catalyst 2960-XR and is the answer not in the manual?

General