27-6
Cisco IE 2000 Switch Software Configuration Guide
OL-25866-01
Chapter 27 Configuring IP Source Guard
How to Configure IP Source Guard
Step 6
private-vlan isolated Specifies an isolated VLAN on a private VLAN port.
Step 7
exit Exits VLAN configuration mode.
Step 8
vlan vlan-id1 Enters configuration VLAN mode.
Step 9
private-vlan association 201 Associates the VLAN on an isolated private VLAN port.
Step 10
exit Exits VLAN configuration mode.
Step 11
interface fastEthernet interface-id Enters interface configuration mode.
Step 12
switchport mode private-vlan host (Optional) Specifies a port as a private VLAN host.
Step 13
switchport private-vlan host-association vlan-id1
vlan-id2
(Optional) Associates this port with the corresponding
private VLAN.
Step 14
ip device tracking maximum number Specifies a maximum for the number of static IPs that
the IP device tracking table allows on the port.
The maximum is 10.
Note You must globally configure the ip device
tracking maximum number interface command
for IPSG for static hosts to work.
Step 15
ip verify source tracking [port-security] Activates IPSG for static hosts with MAC address
filtering on this port.
Step 16
end Exits configuration interface mode.
Step 17
show ip device tracking all Verifies the configuration.
Step 18
show ip verify source interface interface-id Verifies the IPSG configuration and displays IPSG
permit ACLs for static hosts.
Command Purpose
