Configuration Guide     637
Configuring IPv4 IMPB IPv4 Source Guard Configuration
Step 3 ip verify source { sip+mac | sip }
Enable IP Source Guard for IPv4 packets.
sip+mac
: 
Only the packet with its source IP address, source MAC address and port 
number matching the IP-MAC binding rules can be processed, otherwise the packet will be 
discarded.
sip
: 
Only the packet with its source IP address and port number matching the IP-MAC 
binding rules can be processed, otherwise the packet will be discarded.
Step 4 show ip verify source [ interface { fastEthernet 
port
 |
 
gigabitEthernet
 port 
| ten-
gigabitEthernet
 port 
| port-channel
 port-channel-id 
} ]
Verify the IP Source Guard configuration for IPv4 packets.
Step 5 end
Return to privileged EXEC mode.
Step 6 copy running-config startup-config
Save the settings in the configuration file.
The following example shows how to enable IPv4 Source Guard on port 1/0/1:
Switch#configure
Switch(config)#interface gigabitEthernet 1/0/1
Switch(config-if)#ip verify source sip+mac
Switch(config-if)#show ip verify source interface gigabitEthernet 1/0/1
Port           Security-Type       LAG
----            -------------             ----
Gi1/0/1    SIP+MAC                N/A
Switch(config-if)#end
Switch#copy running-config startup-config