hi everyone , I got a problem that I need to config a secure feature "IP SOURECE GUARD" on 2960 switch
Everthing is ok
But, when the IP-MAC mismatch
I can't receive any SYSLOG from "show log"
Only from "show ip verify source" to know which interface be denied
L2#show ip verify source
Interface Filter-type Filter-mode IP-address Mac-address Vlan
--------- ----------- ----------- --------------- ----------------- ----
Fa0/2 ip-mac inactive-no-snooping-vlan
Fa0/3 ip-mac active deny-all permit-all 10
Fa0/4 ip-mac inactive-no-snooping-vlan
Fa0/5 ip-mac inactive-no-snooping-vlan
Fa0/6 ip-mac inactive-no-snooping-vlan
Fa0/7 ip-mac inactive-no-snooping-vlan
Fa0/8 ip-mac inactive-no-snooping-vlan
Fa0/9 ip-mac active 192.168.10.1 permit-all 10
Fa0/10 ip-mac inactive-no-snooping-vlan
does ip source guard has no Features to create LOG ??
or anyone can tell me what I can do that I can receive some message when the "deny-all" situation be triggered
Regards,
Lin