Configure spoof detection to prevent IP spoofing.
For more information about this feature, see Prevention of IP Spoofing within a VLAN.
enable
configure terminal
interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]}
Note
If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.
spoof-detect [port {slot/port[-slot/port][,...]}] [enable]
no spoof-detect [port {slot/port[-slot/port][,...]}] [enable]
auto-recover-port [port {slot/port[-slot/port][,...]}] [enable]
no auto-recover-port [port {slot/port[-slot/port][,...]}] [enable]
Enable spoof detection:
Switch(config-if)# spoof-detect port 1/1 enable
Enable autorecovery on a port:
Switch(config-if)# auto-recover-port port 1/1 enable