Configure the device-tracking tracking auto-source command when a switch virtual interface (SVI) is not configured. You do not have to configure it when a SVI is configured with an IPv4 address on the VLAN. Note * Depending on the client IP address, an IPv4 address has to be reserved for the source IP. A reserved source IPv4 address = (host-ip and mask) | client-ip Configuring Switch Integrated Security Features Example: Mitigating the IPv4 Duplicate Address Problem Command Action (In order to select source IP and MAC address for device tracking ARP probe) Notes device-tracking tracking auto-source global configuration command. • Set source to VLAN SVI if present.
• Look for IP and MAC binding in device-tracking table from same subnet. • Use 0.0.0.0 We recommend that you disable device-tracking on all trunk ports to avoid MAC flapping. device-tracking tracking auto-source override global configuration command. • Set source to VLAN SVI if present • Use 0.0.0.0 Not recommended when there is no SVI. device-tracking tracking auto-source fallback 0.0.0.X 255.255.255.0 global configuration command. • Set source to VLAN SVI if present. • Look for IP and MAC binding in device-tracking table from same subnet. • Compute source IP from client IP using host bit and mask provided. Source MAC is taken from the MAC address of the switchport facing the client*.
We recommend that you disable device-tracking on all trunk ports to avoid MAC flapping. The computed IPv4 address must not be assigned to any client or network device. device-tracking tracking auto-source fallback 0.0.0.X 255.255.255.0 override global configuration command. • Set source to VLAN SVI if present. Compute source IP from client IP using host bit and mask provided*. Source MAC is taken from the MAC address of the switchport facing the client*. - Configuring Switch Integrated Security Features 34