Figure 7: Multi-Switch Set-Ups With Trusted-Port and Device-Role Switch Options Example: When Not to Use Trusted-Port and Device-Role Switch Options While the previous example clarifies how a multi-switch set-up with distributed binding tables stands to benefit from the device-role switch and trusted-port options, it may not suit networks of the following kinds: • Networks where non-Cisco switches are being used • Networks where the switch does not support the SISF-based device-tracking feature. In both cases, we recommended that you not configure the device-role switch and trusted-port options.
Further, we recommended that you maintain a centralised binding table - on the distribution switch. When you do, all the binding entries for all the hosts connected to non-Cisco switches and switches that do not support the feature, are validated by the distribution switch and still secure your network. The figure below illustrates the same. Configuring Switch Integrated Security Features Trusted-Port and Device-Role Switch Configuring Switch Integrated Security Features 13