NOT gleaning from protocol unkn limit address-count for IPv4 per mac 4 (*) limit address-count for IPv6 per mac 12 (*) tracking enable Policy LISP-DT-GUARD-VLAN is applied on the following targets: Target Type Policy Feature Target range vlan 10 VLAN LISP-DT-GUARD-VLAN Device-tracking vlan all note: Binding entry Down timer: 10 minutes (*) Binding entry Stale timer: 30 minutes (*) Example: Programatically Enabling SISF by Configuring LISP (LISP-DT-GUARD-VLAN-MULTI-IP) The following is sample output of programmatic policy LISP-DT-GUARD-VLAN-MULTI-IP . Note The system creates LISP-DT-GUARD-VLAN , or LISP-DT-GLEAN-VLAN , or LISP-DT-GUARD-VLAN-MULTI-IP depending on how LISP is configured.
You cannot change this, but if required you can create a custom policy with custom settings and attach it to the required target. To display policy settings, enter the show device-tracking policy policy_name command in privileged EXEC mode. Tip Since this is only sample output displaying the settings of a programmatic policy, the policy settings may not correspond with the software version running on your device. Always use the show command, to see the latest settings of the policy as applicable to a software version. Device# show device-tracking policy LISP-DT-GUARD-VLAN-MULTI-IP Device-tracking policy LISP-DT-GUARD-VLAN-MULTI-IP configuration:
security-level guard device-role node gleaning from Neighbor Discovery gleaning from DHCP6 gleaning from ARP gleaning from DHCP4 NOT gleaning from protocol unkn limit address-count for IPv4 per mac 21 preference high limit address-count for IPv6 per mac 84 origin fabric tracking enable reachable-lifetime 240 Example: Mitigating the IPv4 Duplicate Address Problem This example shows how you can tackle the Duplicate IP Address 0.0.0.0 error message problem encountered by clients that run Microsoft Windows: Configure the device-tracking tracking auto-source command in global configuration mode.
This command determines the source IP and MAC address used in the ARP probe sent by the switch to probe a client, in order to maintain its entry in the device-tracking table. The purpose, is to avoid using 0.0.0.0 as source IP address. Configuring Switch Integrated Security Features Example: Programatically Enabling SISF by Configuring LISP (LISP-DT-GUARD-VLAN-MULTI-IP) Configuring Switch Integrated Security Features 33