gleaning from ARP gleaning from DHCP4 NOT gleaning from protocol unkn limit address-count for IPv4 per mac 1 (*) tracking enable Policy DT-PROGRAMMATIC is applied on the following targets: Target Type Policy Feature Target range vlan 10 VLAN DT-PROGRAMMATIC Device-tracking vlan all note: Binding entry Down timer: 24 hours (*) Binding entry Stale timer: 24 hours (*) Example: Programatically Enabling SISF by Configuring EVPN on VLAN When you configure EVPN, the system automatically creates programmatic policy evpn-device-track . Enter the show device-tracking policy policy_name command in privileged EXEC mode, to display policy settings.
Tip Since this is only sample output displaying the settings of a programmatic policy, the policy settings may not correspond with the software version running on your device. Always use the show command, to see the latest settings of the policy as applicable to a software version. Device# show device-tracking policy evpn-device-track Device-tracking policy evpn-device-track configuration: security-level glean device-role node gleaning from Neighbor Discovery gleaning from DHCP6 gleaning from ARP gleaning from DHCP4 NOT gleaning from protocol unkn limit address-count for IPv4 per mac 4 preference high limit address-count for IPv6 per mac 12 preference high Example:
Programatically Enabling SISF by Configuring LISP (LISP-DT-GLEAN-VLAN) The following is sample output of programmatic policy LISP-DT-GLEAN-VLAN . Note The system creates LISP-DT-GUARD-VLAN , or LISP-DT-GLEAN-VLAN , or LISP-DT-GUARD-VLAN-MULTI-IP depending on how LISP is configured. You cannot change this, but if required you can create a custom policy with custom settings and attach it to the required target. To display policy settings, enter the show device-tracking policy policy_name command in privileged EXEC mode. Configuring Switch Integrated Security Features Example: Programatically Enabling SISF by Configuring EVPN on VLAN Configuring Switch Integrated Security Features 31