Show Ip Verify Source - Cisco 4500M Command Reference Manual

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

show ip verify source

To display IP source guard configuration and filters on a particular interface, use the show ip verify
source command.
Syntax Description
interface interface_num
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Command History Release
12.1(19)EW
Examples
These examples show how to display IP source guard configuration and filters on a particular interface
with the show ip verify source interface command:
•
Note
•
•
78-16201-01
show ip verify source [interface interface_num]
(Optional) Specifies an interface.
Modification
Support for this command was introduced on the Catalyst 4500 series switch.
The following output appears when DHCP snooping is enabled on VLAN 10-20, interface fa6/1 has
IP source filter mode configured as IP, and an existing IP address binding 10.0.0.1 is on VLAN 10:
Interface Filter-type
--------- -----------
fa6/1 ip
fa6/1 ip
The second entry shows that a default PVACL (deny all IP traffic) is installed on the port for
those snooping-enabled VLANs that do not have a valid IP source binding.
The following output appears when you enter the show ip verify source interface fa6/2 command
and DHCP snooping is enabled on VLAN 10-20, interface fa6/1 has IP source filter mode configured
as IP, and there is an existing IP address binding 10.0.0.1 on VLAN 10:
Interface Filter-type
--------- -----------
fa6/2 ip
The following output appears when you enter the show ip verify source interface fa6/3 command
and the interface fa6/3 does not have a VLAN enabled for DHCP snooping:
Interface Filter-type
--------- -----------
fa6/3 ip
Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW
Filter-mode IP-address
----------- ---------------
active 10.0.0.1
active deny-all
Filter-mode IP-address
----------- ---------------
inactive-trust-port
Filter-mode IP-address
----------- ---------------
inactive-no-snooping-vlan
show ip verify source
Mac-address Vlan
-------------- ---------
10
11-20
Mac-address Vlan
-------------- ---------
Mac-address Vlan
-------------- ---------
2-325