Loading ...
Loading ...
Loading ...
User Guide 880
Configuring IPv4 IMPB IPv4 Source Guard Configuration
Step 3 ip verify source { sip+mac | sip }
Enable IP Source Guard for IPv4 packets.
sip+mac
:
Only the packet with its source IP address, source MAC address and port
number matching the IP-MAC binding rules can be processed, otherwise the packet will be
discarded.
sip
:
Only the packet with its source IP address and port number matching the IP-MAC
binding rules can be processed, otherwise the packet will be discarded.
Note: SIP is only available on certain devices.
Step 4 show ip verify source [ interface { fastEthernet
port
|
gigabitEthernet
port
| ten-
gigabitEthernet
port
| port-channel
port-channel-id
} ]
Verify the IP Source Guard configuration for IPv4 packets.
Step 5 end
Return to privileged EXEC mode.
Step 6 copy running-config startup-config
Save the settings in the configuration file.
The following example shows how to enable IPv4 Source Guard on port 1/0/1:
Switch#configure
Switch(config)#interface gigabitEthernet 1/0/1
Switch(config-if)#ip verify source sip+mac
Switch(config-if)#show ip verify source interface gigabitEthernet 1/0/1
Port Security-Type LAG
---- ------------- ----
Gi1/0/1 SIP+MAC N/A
Switch(config-if)#end
Switch#copy running-config startup-config
Loading ...
Loading ...
Loading ...