Tip This is only sample output displaying the settings of a programmatic policy and may change from one release to another. Always use the show command, to see the settings of a policy as applicable to the software version running on your device. Device# show device-tracking policy LISP-DT-GLEAN-VLAN Policy LISP-DT-GLEAN-VLAN configuration: security-level glean (*) device-role node gleaning from Neighbor Discovery gleaning from DHCP gleaning from ARP gleaning from DHCP4 NOT gleaning from protocol unkn limit address-count for IPv4 per mac 4 (*) limit address-count for IPv6 per mac 12 (*) tracking enable Policy LISP-DT-GUARD-VLAN is applied on the following targets:
Target Type Policy Feature Target range vlan 10 VLAN LISP-DT-GLEAN-VLAN Device-tracking vlan all note: Binding entry Down timer: 10 minutes (*) Binding entry Stale timer: 30 minutes (*) Example: Programatically enabling SISF by Configuring LISP (LISP-DT-GUARD-VLAN) The following is sample output of programmatic policy LISP-DT-GUARD-VLAN . Note The system creates LISP-DT-GUARD-VLAN , or LISP-DT-GLEAN-VLAN , or LISP-DT-GUARD-VLAN-MULTI-IP depending on how LISP is configured. You cannot change this, but if required you can create a custom policy with custom settings and attach it to the required target.
To display policy settings, enter the show device-tracking policy policy_name command in privileged EXEC mode. Tip This is only sample output displaying the settings of a programmatic policy and may change from one release to another. Always use the show command, to see the settings of a policy as applicable to the software version running on your device. Device# show device-tracking policy LISP-DT-GUARD-VLAN Policy LISP-DT-GUARD-VLAN configuration: security-level guard (*) device-role node gleaning from Neighbor Discovery gleaning from DHCP gleaning from ARP gleaning from DHCP4 Configuring Switch Integrated Security Features Example:
Programatically enabling SISF by Configuring LISP (LISP-DT-GUARD-VLAN) Configuring Switch Integrated Security Features 32