DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Turns on the IP host table, and globally enables IP device
tracking.
ip device tracking
Example:
Switch(config)# ip device tracking
Step 2
Enters interface configuration mode.
interface interface-id
Example:
Switch(config)# interface gigabitethernet
Step 3
1/0/1
Configures a port as access.switchport mode access
Example:
Switch(config-if)# switchport mode access
Step 4
Configures the VLAN for this port.
switchport access vlan vlan-id
Example:
Switch(config-if)# switchport access vlan
Step 5
10
Enables IP source guard with source IP address filtering.ip verify source[tracking] [mac-check ]
Step 6
Example:
Switch(config-if)# ip verify source tracking
mac-check
(Optional) tracking—Enables IP source guard for static hosts.
(Optional) mac-check—Enables MAC address filtering.
The command ip verify source tracking mac-checkenables
IP source guard for static hosts with MAC address filtering.
Establishes a maximum limit for the number of static IPs that
the IP device tracking table allows on the port. The range is 1to
10. The maximum number is 10.
ip device tracking maximum number
Example:
Switch(config-if)# ip device tracking
Step 7
You must configure the ip device tracking maximum
limit-number interface configuration command.
Note
maximum 8
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
190 OL-29434-01
Configuring IP Source Guard
Configuring IP Source Guard for Static Hosts on a Layer 2 Access Port
To Next Page
Loading...
Need help?
General
