Cisco 4500M Command Reference Manual page 358

show ip verify source
•
•
Note
•
This example shows how to display all interfaces on the switch that have DHCP snooping security
enabled with the show ip verify source command.
The output is an accumulation of per-interface show CLIs:
Interface
---------
fa6/1
fa6/1
fa6/2
fa6/3
fa6/4
fa6/4
fa6/4
fa6/5
fa6/5
Related Commands
ip igmp snooping
ip dhcp snooping information option
ip dhcp snooping limit rate
ip dhcp snooping trust
ip igmp snooping vlan
ip source binding
ip verify source vlan dhcp-snooping
show ip source binding
Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW
2-326
The following output appears when you enter the show ip verify source interface fa6/4 command
and the interface fa6/4 has IP source filter mode configured as IP MAC, and existing IP MAC that
binds 10.0.0.2/aaaa.bbbb.cccc on VLAN 10 and 11.0.0.1/aaaa.bbbb.cccd on VLAN 11 :
Interface Filter-type
--------- -----------
fa6/4 ip-mac
fa6/4 ip-mac
fa6/4 ip-mac
The following output appears when you enter the show ip verify source interface fa6/5 command
and the interface fa6/5 has IP source filter mode configured as IP MAC, and existing IP MAC
binding 10.0.0.3/aaaa.bbbb.ccce on vlan 10, but port security is not enabled on fa6/5:
Interface Filter-type
--------- -----------
fa6/5 ip-mac
fa6/5 ip-mac
Enable port security first because the DHCP security MAC filter cannot apply to the port or
VLAN.
The following output appears when you enter the show ip verify source interface fa6/6 command
and the interface fa6/6 does not have IP source filter mode configured:
DHCP security is not configured on the interface fa6/6.
Filter-type Filter-mode
----------- -----------
ip active
ip active
ip inactive-trust-port
ip inactive-no-snooping-vlan
ip-mac active
ip-mac active
ip-mac active
ip-mac active
ip-mac active
Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches
Filter-mode IP-address
----------- ---------------
active 10.0.0.2
active 11.0.0.1
active deny-all
Filter-mode IP-address
----------- ---------------
active 10.0.0.3
active deny-all
IP-address
---------------
10.0.0.1
deny-all
10.0.0.2
11.0.0.1
deny-all
10.0.0.3
deny-all
Mac-address Vlan
-------------- ---------
aaaa.bbbb.cccc 10
aaaa.bbbb.cccd 11
deny-all 12-20
Mac-address Vlan
-------------- ---------
permit-all 10
permit-all 11-20
Mac-address Vlan
-------------- ---------
10
11-20
aaaa.bbbb.cccc 10
aaaa.bbbb.cccd 11
deny-all 12-20
permit-all 10
permit-all 11-20
78-16201-01