ip verify source
To enable IP source guard on an interface, use the ip verify source command in interface configuration mode.
To disable IP source guard, use the no form of this command.
ip verify source [mac-check]
no ip verify source
Syntax Description
(Optional) Enables IP source guard with MAC address verification.mac-check
Command Default
IP source guard is disabled.
Command Modes
Interface configuration
Command History
ModificationRelease
This command was introduced.Cisco IOS XE 3.3SECisco IOS XE 3.3SE
Usage Guidelines
To enable IP source guard with source IP address filtering, use the ip verify source interface configuration
command.
To enable IP source guard with source IP address filtering and MAC address verification, use the ip verify
source mac-check interface configuration command.
Examples
This example shows how to enable IP source guard with source IP address filtering on an interface:
Device(config)# interface gigabitethernet1/0/1
Device(config-if)# ip verify source
This example shows how to enable IP source guard with MAC address verification:
Device(config)# interface gigabitethernet1/0/1
Device(config-if)# ip verify source mac-check
You can verify your settings by entering the show ip verify source privileged EXEC command.
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
772
ip verify source