EasyManuals Logo

Cisco Catalyst 3560-X User Manual

Cisco Catalyst 3560-X
1538 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Page #677 background imageLoading...
Page #677 background image
1-25
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-25303-03
Chapter 1 Configuring DHCP Features and IP Source Guard
Configuring IP Source Guard
This example shows how to enable IPSG for static hosts with IP filters on a private VLAN host port:
Switch(config)# vlan 200
Switch(config-vlan)# private-vlan primary
Switch(config-vlan)# exit
Switch(config)# vlan 201
Switch(config-vlan)# private-vlan isolated
Switch(config-vlan)# exit
Switch(config)# vlan 200
Switch(config-vlan)# private-vlan association 201
Switch(config-vlan)# exit
Switch(config)# interface gigabitethernet1/0/3
Switch(config-if)# switchport mode private-vlan host
Switch(config-if)# switchport private-vlan host-association 200 201
Switch(config-if)# ip device tracking maximum 8
Switch(config-if)# ip verify source tracking
Switch# show ip device tracking all
IP Device Tracking = Enabled
IP Device Tracking Probe Count = 3
IP Device Tracking Probe Interval = 30
---------------------------------------------------------------------
IP Address MAC Address Vlan Interface STATE
---------------------------------------------------------------------
40.1.1.24 0000.0000.0304 200 GigabitEthernet1/0/3 ACTIVE
40.1.1.20 0000.0000.0305 200 GigabitEthernet1/0/3 ACTIVE
40.1.1.21 0000.0000.0306 200 GigabitEthernet1/0/3 ACTIVE
40.1.1.22 0000.0000.0307 200 GigabitEthernet1/0/3 ACTIVE
40.1.1.23 0000.0000.0308 200 GigabitEthernet1/0/3 ACTIVE
Step 10
exit Exit VLAN configuration mode.
Step 11
interface fastEthernet interface-id Enter interface configuration mode.
Step 12
switchport mode private-vlan host (Optional) Establish a port as a private VLAN host.
Step 13
switchport private-vlan host-association vlan-id1
vlan-id2
(Optional) Associate this port with the corresponding
private VLAN.
Step 14
ip device tracking maximum number Establish a maximum for the number of static IPs that
the IP device tracking table allows on the port.
The maximum is 10.
Note You must globally configure the ip device
tracking maximum number interface command
for IPSG for static hosts to work.
Step 15
ip verify source tracking [port-security] Activate IPSG for static hosts with MAC address
filtering on this port.
Step 16
end Exit configuration interface mode.
Step 17
show ip device tracking all Verify the configuration.
Step 18
show ip verify source interface interface-id Verify the IP source guard configuration. Display IPSG
permit ACLs for static hosts.
Command Purpose

Table of Contents

Questions and Answers:

Question and Answer IconNeed help?

Do you have a question about the Cisco Catalyst 3560-X and is the answer not in the manual?

Cisco Catalyst 3560-X Specifications

General IconGeneral
Enclosure TypeRack-mountable - 1U
SubtypeGigabit Ethernet
Ports48 x 10/100/1000 + 4 x SFP
Flash Memory64 MB
Power DeviceInternal power supply
Voltage RequiredAC 120/230 V (50/60 Hz)
Operating SystemCisco IOS
Device TypeSwitch
PerformanceSwitching capacity: 128 Gbps
Jumbo Frame SupportYes
Routing ProtocolRIP-1, RIP-2, EIGRP
Remote Management ProtocolSNMP 1, RMON 1, RMON 2, RMON 3, RMON 9, Telnet, SNMP 3, HTTP, HTTPS
FeaturesDHCP support, VLAN support, QoS, IPv6 support, Syslog
Compliant StandardsIEEE 802.3, IEEE 802.3u, IEEE 802.3z, IEEE 802.1D, IEEE 802.1Q, IEEE 802.3ab, IEEE 802.1p, IEEE 802.3af, IEEE 802.3x, IEEE 802.3ad, IEEE 802.1w, IEEE 802.1x, IEEE 802.1s, IEEE 802.3ah, IEEE 802.1ag, IEEE 802.3at
StackingStackable
Security FeaturesSSH, RADIUS, TACACS+
ManagementCLI
Dimensions (H x W x D)17.5 in
Operating Temperature32 to 113 °F (0 to 45 °C)
Humidity10 - 95% (non-condensing)

Related product manuals