27-7
Cisco IE 2000 Switch Software Configuration Guide
OL-25866-01
Chapter 27 Configuring IP Source Guard
Monitoring and Maintaining IP Source Guard
Monitoring and Maintaining IP Source GuardConfiguration Examples for IP Source Guard

Enabling IPSG with Source IP and MAC Filtering: Example

This example shows how to enable IPSG with source IP and MAC filtering on VLANs 10
and 11:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# interface gigabitethernet1/1
Switch(config-if)# ip verify source port-security
Switch(config-if)# exit
Switch(config)# ip source binding 0100.0022.0010 vlan 10 10.0.0.2 interface
gigabitethernet1/1
Switch(config)# ip source binding 0100.0230.0002 vlan 11 10.0.0.4 interface
gigabitethernet1/1
Switch(config)# end

Disabling IPSG with Static Hosts: Example

This example shows how to stop IPSG with static hosts on an interface:
Switch(config-if)# no ip verify source
Switch(config-if)# no ip device tracking max

Enabling IPSG for Static Hosts: Examples

This example shows how to enable IPSG with static hosts on a port:
Switch(config)# ip device tracking
Switch(config)# ip device tracking max 10
Switch(config-if)# ip verify source tracking port-security
This example shows how to enable IPSG for static hosts with IP filters on a Layer 2 access port and to
verify the valid IP bindings on the interface Gi0/3:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# ip device tracking
Switch(config)# interface gigabitethernet 0/3
Switch(config-if)# switchport mode access
Command Purpose
show ip device tracking Displays the active IP or MAC binding entries for all
interfaces.
show ip source binding Displays the IP source bindings on a switc h.
show ip verify source Displays the IP source guard configuration on the switch.
copy running-config startup-config Saves your entries in the configuration file.