Creating a Custom Device Tracking Policy with Custom Settings Beginning in privileged EXEC mode, follow these steps to create and configure a device tracking policy: Procedure Configuring Switch Integrated Security Features Creating a Custom Device Tracking Policy with Custom Settings Command or Action Purpose Device# configure terminal Step 3 Specify an interface or a VLAN • interface type number • vlan configuration vlan list _ Example: Device(config)# interface gigabitethernet 1/1/4 OR Device(config)# vlan configuration 333 interface type number—Specifies the interface and enters interface configuration mode. The device tracking policy will be attached to the specified interface.
vlan configuration vlan list—Specifies the _ VLANs and enters VLAN feature configuration mode. The device tracking policy will be attached to the specified VLAN. Step 4 device-tracking Example: Device(config-if)# device-tracking OR Device(config-vlan-config)# device-tracking Enables SISF-based device tracking and attaches the default policy it to the interface or VLAN. The default policy is a built-in policy with default settings; none of the attributes of the default policy can be changed. Step 5 end Example: Device(config-if)# end OR Device(config-vlan-config)# end Exits interface configuration mode and returns to privileged EXEC mode.
Exits VLAN feature configuration mode and returns to privileged EXEC mode. Step 6 show device-tracking policy policy-name Example: Device# show device-tracking policy default Displays device-tracking policy configuration, and all the targets it is applied to. Command or Action Purpose Step 1 configure terminal Example: Device# configure terminal Enters global configuration mode. Step 2 [no] device-tracking policy policy-name Example: Device(config)# device-tracking policy example policy _ Creates the policy and enters device-tracking configuration mode. Configuring Switch Integrated Security Features 22