Cisco IE-5000 User Manual

423
Configuring IP Source Guard
Configuration Examples for IP Source Guard
IP Device Tracking Probe Interval = 30
---------------------------------------------------------------------
IP Address MAC Address Vlan Interface STATE
---------------------------------------------------------------------
200.1.1.8 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.9 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.10 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.1 0001.0600.0000 9 GigabitEthernet1/18 ACTIVE
200.1.1.1 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.2 0001.0600.0000 9 GigabitEthernet1/18 ACTIVE
200.1.1.2 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.3 0001.0600.0000 9 GigabitEthernet1/18 ACTIVE
200.1.1.3 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.4 0001.0600.0000 9 GigabitEthernet1/18 ACTIVE
200.1.1.4 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.5 0001.0600.0000 9 GigabitEthernet1/18 ACTIVE
200.1.1.5 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.6 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.7 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
This example displays all active IP or MAC binding entries for all interfaces:
Switch# show ip device tracking all active
IP Device Tracking = Enabled
IP Device Tracking Probe Count = 3
IP Device Tracking Probe Interval = 30
---------------------------------------------------------------------
IP Address MAC Address Vlan Interface STATE
---------------------------------------------------------------------
200.1.1.1 0001.0600.0000 9 GigabitEthernet1/17 ACTIVE
200.1.1.2 0001.0600.0000 9 GigabitEthernet1/17 ACTIVE
200.1.1.3 0001.0600.0000 9 GigabitEthernet1/17 ACTIVE
200.1.1.4 0001.0600.0000 9 GigabitEthernet1/17 ACTIVE
200.1.1.5 0001.0600.0000 9 GigabitEthernet1/17 ACTIVE
This example displays all inactive IP or MAC binding entries for all interfaces. The host was first learned on
GigabitEthernet 0/1 and then moved to GigabitEthernet 0/2. The IP or MAC binding entries learned on GigabitEthernet
0/1 are marked as inactive.
Switch# show ip device tracking all inactive
IP Device Tracking = Enabled
IP Device Tracking Probe Count = 3
IP Device Tracking Probe Interval = 30
---------------------------------------------------------------------
IP Address MAC Address Vlan Interface STATE
---------------------------------------------------------------------
200.1.1.8 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.9 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.10 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.1 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.2 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.3 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.4 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.5 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.6 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
200.1.1.7 0001.0600.0000 8 GigabitEthernet1/17 INACTIVE
This example displays the count of all IP device tracking host entries for all interfaces:
Switch# show ip device tracking all count
Total IP Device Tracking Host entries: 5
---------------------------------------------------------------------
Interface Maximum Limit Number of Entries

Cisco IE-5000 Specifications

General

Model	IE-5000
Category	Industrial Ethernet Switch
Switching Capacity	128 Gbps
Forwarding Rate	95.2 Mpps
MAC Address Table Size	16, 000 entries
Ports	16 or 24 10/100/1000 ports
Uplink Ports	4 SFP ports
Operating Temperature	-40°C to 70°C
Power Supply	Dual redundant power supplies
Mounting	DIN rail
Management	Web GUI, CLI, SNMP
Input Voltage	24 VDC or 110/220 VAC
Layer	Layer 2/3
Jumbo Frame Support	Up to 9216 bytes