Applying the Default Device Tracking Policy to a Target Beginning in privileged EXEC mode, follow these steps to apply the default device tracking policy to an interface or VLAN: Procedure Configuring Switch Integrated Security Features Applying the Default Device Tracking Policy to a Target Method of Enabling SISF Applicable Configuration Tasks Result Option 4: Programmatically, by configuring Locator ID Separation Protocol (LISP). Example: Programatically enabling SISF by Configuring LISP (LISP-DT-GUARD-VLAN), on page 32 Example: Programatically Enabling SISF by Configuring LISP (LISP-DT-GLEAN-VLAN), on page 31 Example:
Programatically Enabling SISF by Configuring LISP (LISP-DT-GUARD-VLAN-MULTI-IP), on page 33 When you configure LISP, the system automatically creates policy LISP-DT-GUARD-VLAN, LISP-DT-GLEAN-VLAN, or other variants, depending on the software release. Option 5: Programmatically, by configuring EVPN VLAN. Example: Programatically Enabling SISF by Configuring EVPN on VLAN, on page 31 When you configure EVPN on VLAN, the system automatically creates policy evpn-sisf-policy, evpn-device-track, or other variants, depending on the software release. Option 6:
By using an interface template Using an Interface Template to Enable SISF, on page 27 By adding the policy to an interface template, you can apply the same policy to multiple targets, without having to create it separately for each target. Option 7: Migrating from legacy IPDT and IPv6 Snooping. Migrating from Legacy IPDT and IPv6 Snooping to SISF-Based Device Tracking, on page 29 Convert legacy IPDT and IPv6 Snooping configuration to the SISF-based device-tracking commands. Command or Action Purpose Step 1 enable Example: Device> enable Enables privileged EXEC mode. Enter your password if prompted. Step 2 configure terminal Example: Enters global configuration mode.
Configuring Switch Integrated Security Features 21