Disable IP Source Guard for IPv4 Addresses

About this task

Disable IP Source Guard (IPSG) on a port to allow traffic from all IPv4 addresses to go through the port without being filtered.

Procedure

  1. Enter GigabitEthernet Interface Configuration mode:

    enable

    configure terminal

    interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-port]][,...]}

    Note

    Note

    If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.

  2. Disable IPSG for IPv4 addresses:

    no ip source verify

  3. Verify IPSG configuration:

    show ip source verify interface gigabitethernet [{slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}]

Example

Disable IPSG on port 4/1.

Switch:1>enable
Switch:1#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Switch:1(config)#interface gigabitEthernet 4/1
Switch:1(config-if)#no ip source verify

Verify the configuration.

Switch:1(config-if)#show ip source verify interface gigabitEthernet 4/1

===================================================================================
                             Source Guard Port Info
===================================================================================
PORT
NUM        ENABLE
-----------------------------------------------------------------------------------
4/1        false
-----------------------------------------------------------------------------------

All 1 out of 1 Total Num of Ip Source Guard entries displayed