Figure 1: SISF Framework Note The terms “SISF” “device-tracking” and “SISF-based device-tracking” are used interchangeably in this document and refer to the same feature. Neither term is used to mean or should be confused with the legacy IPDT or IPv6 Snooping features. Understanding the SISF Infrastructure This section explains the various elements of the SISF infrastructure as shown in the SISF Framework above. The Binding Table The SISF infrastructure is built around the binding table. The binding table contains information about the hosts that are connected to the ports of a switch and the IP and MAC address of these hosts.
This helps to create a physical map of all the hosts that are connected to a switch. Each entry in a binding table provides the following information about a connected host: • IPv4 or IPv6 address of the host. • MAC address of the host. The same MAC address may be linked to an IPv4 and IPv6 address. • The interface or port on the switch that the host is connected to, and the associated VLAN. • The state of the entry, which indicates the reachability of the entry. Configuring Switch Integrated Security Features Understanding the SISF Infrastructure Configuring Switch Integrated Security Features 2