for IPv4 per mac and limit address-count for IPv6 per mac, which are aggregated from the policy on both the interface and VLAN. • A policy cannot be removed unless the device tracking client feature configuration is removed. How to Configure SISF SISF or SISF-based device-tracking, is disabled by default. You enable it by defining a device-tracking policy and attaching the policy to a specific target. The target could be an interface or a VLAN. There are multiple ways to define a policy and no single method is a preferred or recommended one - use the option that suits your requirements.
Configuring Switch Integrated Security Features How to Configure SISF Method of Enabling SISF Applicable Configuration Tasks Result Option 1: Manually, by using interface configuration commands to create and apply the default policy to a target. Applying the Default Device Tracking Policy to a Target, on page 21 Automatically applies the default device tracking policy to the specified target. The default policy is a built-in policy with default settings; you cannot change any of the attributes of the default policy. See Option 2 if you want to configure device tracking policy attributes. Option 2:
Manually, by using global configuration commands commands to create a custom policy and applying the custom policy to a target. 1. Creating a Custom Device Tracking Policy with Custom Settings, on page 22 2. Attach the custom policy to an interface or VLAN: Attaching a Device Tracking Policy to an Interface, on page 25 OR Attaching a Device Tracking Policy to a VLAN, on page 26 Creates a custom policy with the name and policy parameters you configure, and attaches the policy to the specified target. Option 3: Programmatically, by configuring the snooping command. Enter the ip dhcp snooping vlanvlan command in global configuration mode. Example:
Programatically Enabling SISF by Configuring DHCP Snooping, on page 30 When you configure the command, the system automatically creates policy DT-PROGRAMMATIC. Use this method if you want to enable SISF-based device tracking for these clients: IEEE 802.1X, Web authentication, Cisco TrustSec, IP Source Guard, and SANET. Configuring Switch Integrated Security Features 20