• Use the legacy IPv6 Snooping commands for your future configuration and do not run the device-tracking upgrade-cli command. With this option, only the legacy IPv6 Snooping commands are available on your device, and you cannot use the new SISF-based device tracking CLI commands. Both IPDT and IPv6 Snooping Configuration Exist On a device that has both legacy IPDT configuration and IPv6 snooping configuration, you can convert legacy commands to the SISF-based device tracking CLI commands. However, note that only one snooping policy can be attached to an interface, and the IPv6 snooping policy parameters override the IPDT settings.
Note If you do not migrate to the new SISF-based commands and continue to use the legacy IPv6 snooping or IPDT commands, your IPv4 device tracking configuration information may be displayed in the IPv6 snooping commands, as the SISF-based device tracking feature handles both IPv4 and IPv6 configuration. To avoid this, we recommend that you convert your legacy configuration to SISF-based device tracking commands. No IPDT or IPv6 Snooping Configuration Exists If your device has no legacy IP Device Tracking or IPv6 Snooping configurations, you can use only the new SISF-based device tracking commands for all your future configuration.
The legacy IPDT commands and IPv6 snooping commands are not available. Configuration Examples for SISF Example: Programatically Enabling SISF by Configuring DHCP Snooping The following example shows how to configure the ip dhcp snooping vlan vlan command in global configuration mode to enable SISF-based device-tracking. When you enable SISF this way, the system creates the DT-PROGRMMATIC policy. Enter the show device-tracking policy policy_name command in privileged EXEC mode, to display the settings for a DT-PROGRMMATIC policy. Tip This is only sample output displaying the settings of a programmatic policy and may change from one release to another.
Always use the show command, to see the settings of a policy as applicable to the software version running on your device. Device> enable Device# configure terminal Device(config)# ip dhcp snooping vlan 10 Device(config)# end Device# show device-tracking policy DT-PROGRAMMATIC Policy DT-PROGRAMMATIC configuration: security-level glean (*) device-role node gleaning from Neighbor Discovery gleaning from DHCP Configuring Switch Integrated Security Features Configuration Examples for SISF Configuring Switch Integrated Security Features 30