IP Source Guard

[muos]

I'm trying to enable IP Source Guard on an old ws-c2960-24tt-l iso 15.0(2)SE4

In EXEC mode 

int f0/x

I've tried both commands both error at verify, sadly... Any pointer?

ip verify source

    ^

ip verify source port-security

    ^

[balaji.bandi]

post output :

show version

show License

[MHM Cisco World]

if the command not accept then this feature is not work in this platform.

[muos]

Thank you for your responses. Trying to learn Cisco and would like to mitigate IP address spoofing. What other configuration do you suggest, given that IP Source Guard is unavailable to me?

I would appreciate any advice you can give me.

[Marius Gunnerud]

If this command is not available then you are most likely either missing the security license or running LAN LITE image.  Verify which IOS image you are using on the switch and the license features installed.

You could also look into DHCP snooping and ARP inspection.

[muos]

Marius, I'm using a packet tracer, so not sure how the license works. I've enabled DHCP snooping, and ARP inspection does that act as protection for IP address spooning as well? 

[Marius Gunnerud · Accepted solution]

Yes they help with protecting against IP address spoofing as they create a database of IP to MAC associations.  IP Source Guard also uses these tables for its mapping.