Use the Cisco Feature Navigator to find information about platform and software image support. To access Cisco Feature Navigator, go to https://cfnng.cisco.com . Configuring Switch Integrated Security Features Feature History for SISF Release Feature Feature Information Cisco IOS XE Amsterdam 17.3.1 • Interface template • Throttling Limit for ARP Packets • The option to enable SISF-Based Device-Tracking by using an interface template was introduced. You can add the device-tracking policy policy name global _ configuration command to a template and apply it to multiple targets. For more information, see the Using an Interface Template to Enable SISF, on page 27 section in this chapter.
• ARP packets are throttled to mitigate high CPU utilization scenarios. In a five second window, a maximum of 50 ARP packets per binding entry are processed by SISF. For more information, see the Binding Table Sources, on page 5 section in this chapter. Cisco IOS XE Cupertino 17.7.1 • Drop action on ARP packets • ARP Protection • The packet drop action can occur with ARP packets. The drop action is restricted to ND Packets in earlier releases. For more information, see Actions on a Packet and Actions on the Binding Table , on page 8. • ARP Protection:
Support for the prevention of IPv4 spoofing was introduced (Detection and reporting of IPv4 spoofing is supported since the introductory release of SISF). For more information, see Example: Detecting and Preventing Spoofing, on page 36. Cisco IOS XE 17.13.1 Deprecation of the udp keyword The udp keyword is deprecated and no longer displayed on the CLI. In the device-tracking configuration mode, the udp keyword was one of the options available with the protocol keyword. For more information, see the Command Reference for this release. Cisco IOS XE 17.14.1 Throttling Limit for ARP Packets Enhanced The throttling limit for ARP packets was increased from 50 to 100 ARP packets for each source IP.
For more information, see the Binding Table Sources, on page 5 section in this chapter. Configuring Switch Integrated Security Features 39