DHCP Snooping Commands
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
Example
The following examples display the IP Source Guard status.
switchxxxxxx#
show ip source-guard status
IP source guard is globally enaabled.
Interface
Filter
-------
-----
gi11
IP
gi12
IP
gi13
IP
gi14
IP
13.17 show ip source-guard inactive
Use the show ip source-guard inactive EXEC mode command to display the IP
Source Guard inactive addresses.
Syntax
show ip source-guard inactive
Parameters
N/A
Command Mode
User EXEC mode
User Guidelines
Since the IP Source Guard uses the Ternary Content Addressable Memory
(TCAM) resources, there may be situations when IP Source Guard addresses are
inactive because of a lack of TCAM resources.
By default, once every minute the software conducts a search for available space
in the TCAM for the inactive IP Source Guard addresses.
Use the
ip source-guard tcam retries-freq
frequency or to disable automatic retries for TCAM space.
Use the
ip source-guard tcam locate
resources for the inactive IP Source Guard addresses.
Status
IP Address
-------
-----------
Active
10.1.8.1
Active
10.1.8.2
Active
Deny all
Inactive
command to change the retry
command to manually retry locating TCAM
MAC Address
VLAN
---------------
---
0060.704C.73FF
3
0060.704C.7BC1
3
0060.704C.7BC3
4
13
Type
-----
DHCP
Static
DHCP
336