User Guide
651
Configuring IPv4 IMPB
IPv4 Source Guard Configuration
Step 3
ip verify source {
sip+mac | sip
}
Enable IP Source Guard for IPv4 packets.
sip+mac
:
Only the packet with its source IP address, source MAC address and port
number matching the IP-MAC binding rules can be processed, otherwise the packet will be
discarded.
sip
:
Only the packet with its source IP address and port number matching the IP-MAC
binding rules can be processed, otherwise the packet will be discarded.
Step 4
show ip verify source [ interface { fastEthernet
port |
gigabitEthernet
port |
ten-
gigabitEthernet
port |
port-channel
port-channel-id
} ]
Verify the IP Source Guard configuration for IPv4 packets.
Step 5
end
Return to privileged EXEC mode.
Step 6
copy running-config startup-config
Save the settings in the configuration file.
The following example shows how to enable IPv4 Source Guard on port 1/0/1:
Switch#configure
Switch(config)#interface gigabitEthernet
1/0/1
Switch(config-if)#ip verify source sip+mac
Switch(config-if)#show ip verify source interface gigabitEthernet
1/0/1
Port Security-Type LAG
---- ------------- ----
Gi1/0/1 SIP+MAC N/A
Switch(config-if)#end
Switch#copy running-config startup-config
Downloaded from
