Ip Verify Source - Cisco ME 3400 Command Reference Manual
Ethernet access switch
Hide thumbs
Also See for ME 3400:
- Software configuration manual (1138 pages) ,
- Command reference manual (872 pages) ,
- Hardware installation manual (88 pages)
Table of Contents
Advertisement
Chapter 2
Cisco ME 3400 Ethernet Access Switch Cisco IOS Commands
ip verify source
Use the ip verify source interface configuration command to enable IP source guard on an interface. Use
the no form of this command to disable IP source guard.
Syntax Description
vlan dhcp-snooping
tracking
port-security
Defaults
IP source guard is disabled.
Command Modes
Interface configuration
Command History
Release
12.2(25)EX
12.2(50)SE
12.2(52)SE
Usage Guidelines
To enable IP source guard with source IP address filtering, use the ip verify source interface
configuration command.
To enable IP source guard with source IP and MAC address filtering, use the ip verify source
port-security interface configuration command.
To enable IP source guard with source IP and MAC address filtering, you must enable port security on
the interface.
Examples
This example shows how to enable IP source guard with source IP address filtering:
Switch(config-if)# ip verify source
This example shows how to enable IP source guard on VLANs 10 through 20 on a per-port basis:
Switch# configure terminal
Enter configuration commands, one per line.
Switch(config)# ip dhcp snooping
Switch(config)# ip dhcp snooping vlan 10 20
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# switchport trunk encapsulation dot1q
OL-9640-10
ip verify source {vlan dhcp-snooping | tracking} [port-security]
no ip verify source {vlan dhcp-snooping | tracking} [port-security]
Enable IP source guard on an untrusted Layer 2 DHCP snooping interfaces.
Enable IP port security to learn static IP address learning on a port.
(Optional) Enable IP source guard with IP and MAC address filtering.
If you do not enter the port-security keyword, IP address filtering is
enabled.
Modification
This command was introduced.
The command was supported in the metro base image.
The vlan dhcp-snooping and tracking keywords were added.
End with CNTL/Z.
Cisco ME 3400 Ethernet Access Switch Command Reference
ip verify source
2-201
Advertisement
Table of Contents
