514
IP source guard commands
In this chapter, "MSR1000" refers to MSR1002-4. "MSR2000" refers to MSR2003, MSR2004-24,
MSR2004-48. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064.
"MSR4000" collectively refers to MSR4060 and MSR4080.
The IP source guard commands are supported on the following hardware:
• MSR routers installed with the Layer 2 switching module HMIM-24GSW/24GSWP or
HMIM-8GSW.
• The fixed Layer 2 Ethernet ports on the MSR2004-24 and MSR2004-48.
display ip source binding
Use display ip source binding to display IPv4 source guard binding entries.
Syntax
MSR2000/MSR3000:
display ip source binding [ static | [ vpn-instance vpn-instance-name ] [ dhcp-snooping | dot1x ] ]
[ ip-address ip-address ] [ mac-address mac-address ] [ vlan vlan-id ] [ interface interface-type
interface-number ]
MSR4000:
display ip source binding [ static | [ vpn-instance vpn-instance-name ] [ dhcp-snooping | dot1x ] ]
[ ip-address ip-address ] [ mac-address mac-address ] [ vlan vlan-id ] [ interface interface-type
interface-number ] [ slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
static: Displays static IPv4 source guard binding entries.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name. The VPN instance
name is a case-sensitive string of 1 to 31 characters. To display dynamic IPv4 source guard binding
entries for the public network, do not specify a VPN instance.
dhcp-snooping: Displays dynamic IPv4 source guard binding entries based on DHCP snooping.
dot1x: Displays dynamic IPv4 source guard binding entries based on 802.1X.
ip-address ip-address: Displays IP source guard binding entries for an IPv4 address.
mac-address mac-address: Displays IP source guard binding entries for a MAC address. The MAC
address must be specified in H-H-H format.