Cisco IE 4000

423
Configuring IP Source Guard
Configuration Examples for IP Source Guard
IP Device Tracking Probe Interval = 30
---------------------------------------------------------------------
IP Address MAC Address Vlan Interface STATE
---------------------------------------------------------------------
200.1.1.8 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.9 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.10 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.1 0001.0600.0000 9 GigabitEthernet1/18 ACTIVE
200.1.1.1 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.2 0001.0600.0000 9 GigabitEthernet1/18 ACTIVE
200.1.1.2 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.3 0001.0600.0000 9 GigabitEthernet1/18 ACTIVE
200.1.1.3 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.4 0001.0600.0000 9 GigabitEthernet1/18 ACTIVE
200.1.1.4 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.5 0001.0600.0000 9 GigabitEthernet1/18 ACTIVE
200.1.1.5 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.6 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.7 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
This example displays all active IP or MAC binding entries for all interfaces:
Switch# show ip device tracking all active
IP Device Tracking = Enabled
IP Device Tracking Probe Count = 3
IP Device Tracking Probe Interval = 30
---------------------------------------------------------------------
IP Address MAC Address Vlan Interface STATE
---------------------------------------------------------------------
200.1.1.1 0001.0600.0000 9 GigabitEthernet1/17 ACTIVE
200.1.1.2 0001.0600.0000 9 GigabitEthernet1/17 ACTIVE
200.1.1.3 0001.0600.0000 9 GigabitEthernet1/17 ACTIVE
200.1.1.4 0001.0600.0000 9 GigabitEthernet1/17 ACTIVE
200.1.1.5 0001.0600.0000 9 GigabitEthernet1/17 ACTIVE
This example displays all inactive IP or MAC binding entries for all interfaces. The host was first learned on
GigabitEthernet 0/1 and then moved to GigabitEthernet 0/2. The IP or MAC binding entries learned on GigabitEthernet
0/1 are marked as inactive.
Switch# show ip device tracking all inactive
IP Device Tracking = Enabled
IP Device Tracking Probe Count = 3
IP Device Tracking Probe Interval = 30
---------------------------------------------------------------------
IP Address MAC Address Vlan Interface STATE
---------------------------------------------------------------------
200.1.1.8 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.9 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.10 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.1 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.2 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.3 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.4 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.5 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.6 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.7 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
This example displays the count of all IP device tracking host entries for all interfaces:
Switch# show ip device tracking all count
Total IP Device Tracking Host entries: 5
---------------------------------------------------------------------
Interface Maximum Limit Number of Entries