• Client IP = 192.0.2.25 • Source IP = (192.0.2.25 and 255.255.255.0) | (0.0.0.1) = 192.0.2.1 IP address 192.0.2.1 should not be assigned to any client or network device. Example: Disabling IPv6 Device Tracking on a Target By default, SISF-based device-tracking supports both IPv4 and IPv6. The following configuration examples show how you can disable IPv6 device-tracking where supported. To disable device-tracking for IPv6, when a custom policy is attached to a target (all releases):
Device(config)# device-tracking policy example-policy Device(config-device-tracking)# no protocol ndp Device(config-device-tracking)# no protocol dhcp6 Device(config-device-tracking)# end To disable device-tracking for IPv6, when a programmatic policy is attached to a target (Only Cisco IOS XE Everest 16.6.x and Cisco IOS XE Fuji 16.8.x): Device(config)# device-tracking policy DT-PROGRAMMATIC Device(config-device-tracking)# no protocol ndp Device(config-device-tracking)# no protocol dhcp6 Device(config-device-tracking)# end Note • In the Cisco IOS XE Everest 16.5.x release, when a programmatic policy is attached, you cannot disable device-tracking for IPv6.
• In the Cisco IOS XE Everest 16.6.x and Cisco IOS XE Fuji 16.8.x, when a programmatic policy is attached, you can disable device-tracking for IPv6 - as shown in the example above. • Starting with Cisco IOS XE Fuji 16.9.x, you cannot change the settings of a programmatic policy. Example: Enabling IPv6 for SVI on VLAN (To Mitigate the Duplicate Address Problem) When IPv6 is enabled in the network and a switched virtual interface (SVI) is configured on a VLAN, we recommend that you add the following to the SVI configuration.
This enables the SVI to acquire a link-local address automatically; this address is used as the source IP address of the SISF probe, thus preventing the duplicate IP address issue. Device> enable Device# configure terminal Device(config)# interface vlan 10 Device(config-if)# ipv6 enable Device(config-if)# end Configuring Switch Integrated Security Features Example: Disabling IPv6 Device Tracking on a Target Configuring Switch Integrated Security Features 35