Cisco IE-5000 User Manual

421
Configuring IP Source Guard
Monitoring and Maintaining IP Source Guard
Monitoring and Maintaining IP Source Guard
Configuration Examples for IP Source Guard
Enabling IPSG with Source IP and MAC Filtering: Example
This example shows how to enable IPSG with source IP and MAC filtering on VLANs 10
and 11:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# interface GigabitEthernet1/17
Switch(config-if)# ip verify source port-security
Switch(config-if)# exit
Switch(config)# ip source binding 0100.0022.0010 vlan 10 10.0.0.2 interface GigabitEthernet1/17
Switch(config)# ip source binding 0100.0230.0002 vlan 11 10.0.0.4 interface GigabitEthernet1/17
Switch(config)# end
Disabling IPSG with Static Hosts: Example
This example shows how to stop IPSG with static hosts on an interface:
Switch(config-if)# no ip verify source
Switch(config-if)# no ip device tracking max
10. end Returns to privileged EXEC mode.
11. show ip verify source interface interface-id Verifies the configuration and displays IPSG permit
ACLs for static hosts.
12. show ip device track all
[active | inactive] count
Verifies the configuration by displaying the IP-to-MAC
binding for a given host on the switch interface.
 all active—Displays only the active IP or MAC
binding entries
 all inactive—Displays only the inactive IP or MAC
binding entries
 all—Displays the active and inactive IP or MAC
binding entries
Command Purpose
Command Purpose
show ip device tracking Displays the active IP or MAC binding entries for all interfaces.
show ip source binding Displays the IP source bindings on a switch.
show ip verify source Displays the IP source guard configuration on the switch.
copy running-config startup-config Saves your entries in the configuration file.

Cisco IE-5000 Specifications

General

Brand	Cisco
Model	IE-5000
Category	Switch
Language	English