C
HAPTER
25
| General Security Measures
IPv4 Source Guard
– 925 –
EXAMPLE
This command clears the blocked record table.
Console(config)#clear ip source-guard binding blocked
Console(config)#
show ip
source-guard
This command shows whether source guard is enabled or disabled on each
interface.
COMMAND MODE
Privileged Exec
EXAMPLE
Console#show ip source-guard
ACL Table MAC Table
Interface Filter-type Filter-table Max-binding Max-binding
--------- ----------- ------------ ----------- -----------
Eth 1/1 DISABLED ACL 5 1024
Eth 1/2 DISABLED ACL 5 1024
Eth 1/3 DISABLED ACL 5 1024
Eth 1/4 DISABLED ACL 5 1024
Eth 1/5 DISABLED ACL 5 1024
.
.
.
show ip
source-guard
binding
This command shows the source guard binding table.
SYNTAX
show ip source-guard binding [dhcp-snooping |
static [acl | mac] | blocked [vlan vlan-id | interface interface]
dhcp-snooping - Shows dynamic entries configured with DHCP
Snooping commands (see page 899)
static - Shows static entries configured with the ip source-guard
binding command (see page 920).
acl - Shows static entries in the ACL binding table.
mac - Shows static entries in the MAC address binding table.
blocked - Shows blocked records of invalid packets.
vlan-id (Range: 1-4094)
interface
ethernet unit/port
unit - Unit identifier. (Range: 1)
port - Port number. (Range: 1-28)
COMMAND MODE
Normal Exec