Chapter 9
| General Security Measures
IPv4 Source Guard
– 304 –
stored before the switch overwrites the oldest record with new blocked
records. Use the clear ip source-guard binding blocked command to
clear this table.
Example
This command clears the blocked record table.
Console(config)#clear ip source-guard binding blocked
Console(config)#
show ip source-guard
This command shows whether source guard is enabled or disabled on each
interface.
Command Mode
Privileged Exec
Example
Console#show ip source-guard
ACL Table MAC Table
Interface Filter-type Filter-table Max-binding Max-binding
--------- ----------- ------------ ----------- -----------
Eth 1/1 DISABLED ACL 5 1024
Eth 1/2 DISABLED ACL 5 1024
Eth 1/3 DISABLED ACL 5 1024
Eth 1/4 DISABLED ACL 5 1024
Eth 1/5 DISABLED ACL 5 1024
.
.
.
show ip source-guard
binding
This command shows the source guard binding table.
Syntax
show ip source-guard binding
[
dhcp-snooping
|
static
[
acl
|
mac
] |
blocked
[
vlan
vlan-id |
interface
interface]
dhcp-snooping
- Shows dynamic entries configured with DHCP Snooping
commands (see page 282)
static
- Shows static entries configured with the ip source-guard binding
command.
acl
- Shows static entries in the ACL binding table.
mac
- Shows static entries in the MAC address binding table.
blocked
- Shows MAC addresses which have been blocked by IP Source
Guard.
vlan-id - ID of a configured VLAN (Range: 1-4094)
To Next Page
Loading...
Need help?
General