What to do next Attach the policy to an interface or VLAN. Attaching a Device Tracking Policy to an Interface Beginning in privileged EXEC mode, follow these steps to attach a device tracking policy to an interface: Configuring Switch Integrated Security Features Attaching a Device Tracking Policy to an Interface Command or Action Purpose • (Optional) tracking—Specfies a tracking option. Enter one of these options: • disable [stale-lifetime [1-86400-seconds|infinite] ] —Turns of device-tracking. Optionally, you can enter the duration for which the entry is kept inactive before deletion, or keep it permanently inactive.
• enable [reachable-lifetime [1-86400-seconds|infinite] ] —Turns on device-tracking. Optionally, you can enter the duration for which the entry is kept reachable, or keep it permanently reachable. • (Optional) trusted-port—Sets up a trusted port. Disables the guard on applicable targets. Bindings learned through a trusted port have preference over bindings learned through any other port. A trusted port is given preference in case of a collision while making an entry in the table. • (Optional) vpc—Although visible on the CLI, this option is not supported. Any configuration settings you make will not take effect. Step 4 end Example:
Device(config-device-tracking)# end Exits device-tracking configuration mode and returns to privileged EXEC mode. Step 5 show device-tracking policy policy-name Example: Device# show device-tracking policy example policy _ Displays the device-tracking policy configuration. Configuring Switch Integrated Security Features 25