Configuring Switch Integrated Security Features Creating a Custom Device Tracking Policy with Custom Settings Command or Action Purpose Step 3 [data-glean | default | destination-glean | device-role | distribution-switch | exit | limit | no | prefix-glean | protocol | security-level | tracking | trusted-port | vpc] Example: Device(config-device-tracking)# destination-glean log-only Enter the question mark (?) at the system prompt to obtain a list of available options in this mode. You can configure the following for both IPv4 and IPv6:
• (Optional) data-glean—Enables learning of addresses from a data packet snooped from a source inside the network and populates the binding table with the data traffic source address. Enter one of these options: • log-only—Generates a syslog message upon data packet notification • recovery—Uses a protocol to enable binding table recovery. Enter NDP or DHCP. • (Optional) default—Sets the policy attribute to its default value. You can set these policy attributes to their default values: data-glean, destination-glean, device-role, limit, prefix-glean, protocol, security-level, tracking, trusted-port.
• (Optional) destination-glean—Populates the binding table by gleaning data traffic destination address. Enter one of these options: • log-only—Generates a syslog message upon data packet notification • recovery—Uses a protocol to enable binding table recovery. Enter DHCP. • (Optional) device-role—Sets the role of the device attached to the port. It can be a node or a switch. Enter one of these options: • node—Configures the attached device as a node. This is the default option. • switch—Configures the attached device as a switch. • (Optional) distribution-switch—Although visible on the CLI, this option is not supported. Any configuration settings you make will not take effect.
Configuring Switch Integrated Security Features 23