per port limit is one, and the IPv4 per MAC limit is 100. The limit is reached with a single host’s IPv4-MAC binding entry. No further IP entries are allowed in the table even though the MAC has a provision for 99 more IP addresses for that MAC. • Global and policy-level limits The limits configured with the device-tracking binding max-entries command are at the global level, the limits configured with the limit address-count command in the device-tracking configuration mode are for a policy, which is at the interface or VLAN level.
If a policy-level value and a globally configured value exists, the creation of binding entries is stopped when a limit is reached - this limit can be any one of the global values or the policy-level value. If only globally configured values exist, the creation of binding entries is stopped when a limit is reached. If only a policy-level value exists, the creation of binding entries is stopped when the policy-level limit is reached. Tracking The tracking parameter involves tracking of hosts in the network. In section #unique_751 unique_751_Connect_ 42_section_axm_sbk_ctb above, this is referred to as "polling". It also describes polling behaviour in detail.
To configure polling parameters at the global level, enter the device-tracking tracking command in global configuration mode. After you configure this command you still have the flexibility to turn polling on or off, for individual interfaces and VLANs. For this you must enable or disable polling in the policy. To enable polling in a policy, enter the tracking enable keywords in the device-tracking configuration mode. By default, polling is disabled in a policy. Guidelines for Policy Creation • If multiple policies are available on a given target, a system-internal policy priority determines which policy takes precedence. A manually created policy has the highest priority.
When you want to override the settings of a programmatically created policy, you can create a custom policy, so it has higher priority. • The parameters of a programmatically created policy cannot be changed. You can configure certain attributes of a custom policy. Guidelines for Applying a Policy • Multiple policies can be attached to the same VLAN. • If a programmatic policy is attached to a VLAN and you want to change policy settings, create a custom device-tracking policy and attach it to the VLAN. • When multiple policies with different priorities are attached to the same VLAN, the settings of the policy with the highest priority are effective.
The exceptions here are the limit address-count for IPv4 per mac and limit address-count for IPv6 per mac settings - the settings of the policy with the lowest priorty are effective. • When a device-tracking policy is attached to an interface under a VLAN, the policy settings on the interface take precedence over those on its VLAN; exceptions here are the values for limit address-count Configuring Switch Integrated Security Features Tracking Configuring Switch Integrated Security Features 19