How to Configure IP Source Guard
Enabling IP Source Guard
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
interface interface-id
4.
ip verify source [mac-check ]
5.
exit
6.
ip source binding mac-address vlan vlan-id ip-address interface interface-id
7.
end
8.
show running-config
9.
copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode. Enter your password
if prompted.
enable
Example:
Switch> enable
Step 1
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 2
Specifies the interface to be configured, and enters
interface configuration mode.
interface interface-id
Example:
Switch(config)# interface gigabitethernet 1/0/1
Step 3
Enables IP source guard with source IP address filtering.ip verify source [mac-check ]
Step 4
Example:
Switch(config-if)# ip verify source
(Optional) mac-check—Enables IP Source Guard with
source IP address and MAC address filtering.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
238 OL-29048-01
Configuring IP Source Guard
How to Configure IP Source Guard