"ip device tracking" is used by switch track existence of a host in switches per l2 interface. This command is used with L2 IP NAC, which won't work without it.
Snippet from http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/catos/8.x/configuration/guide/host_age.html Understanding How Host Aging is Tracked Layer 2 authentication features, 802.1x, and MAC authentication bypass install entries into the CAM table to ensure packet switching in the hardware. The CAM entries are static and it cannot be ensured that they are current. The entries age with the hardware if they are not removed by the authentication feature at the end of the session. If a host leaves before the authentication session expires or if the authentication manager is not notified about removing the CAM entry, the stale entry remains in the hardware switching table. Even the Layer 3 protocols, LAN port IP and Web-based proxy authentication have no method to age out the CAM entry if the host leaves before the session expires. The IP device-tracking feature, which is included in the authentication manager, tracks the existence of the host and removes aged entries in the CAM table. The device-tracking feature ensures that the hardware entries and authentication sessions get aged out. As a result of aging, the hosts are removed from the EARL. With regards Kings On Sun, May 29, 2011 at 8:49 PM, Bruno <[email protected]> wrote: > Which command is that? > I do not have it > > SW2(config-if)#ip verify source ? > port-security port security > <cr> > > > > > On Sun, May 29, 2011 at 10:17 AM, Jim Terry <[email protected]> wrote: > >> Hi all, >> >> Here is my question but in more detail: >> >> What does this do: >> >> Switch(config)# ip device tracking >> Switch(config)# *interface gigabitethernet 0/3 >> *Switch(config-if)# switchport mode access >> Switch(config-if)# switchport access vlan 10 >> Switch(config-if)# ip device tracking maximum 5 >> Switch(config-if)# ip verify source tracking >> Switch(config-if)# end >> I dont understand what device tracking does. >> >> Thanks, >> >> JT >> >> >> >> On Sat, May 28, 2011 at 10:27 AM, Kingsley Charles < >> [email protected]> wrote: >> >>> Can you elaborate your question. >>> >>> With regards >>> Kings >>> >>> On Sat, May 28, 2011 at 7:29 PM, Jim Terry <[email protected]>wrote: >>> >>>> Hi all, >>>> >>>> I am looking at the 3560 config guide and on the section for IPSG it >>>> talks about a static host(the section that has IP device tracking). I know >>>> it is different than adding a binding to a non dhcp host but I still dont >>>> understand the concept. >>>> >>>> Can anyone enlighten me? >>>> >>>> JT >>>> >>>> >>>> >>>> _______________________________________________ >>>> For more information regarding industry leading CCIE Lab training, >>>> please visit www.ipexpert.com >>>> >>>> Are you a CCNP or CCIE and looking for a job? Check out >>>> www.PlatinumPlacement.com <http://www.platinumplacement.com/> >>>> >>> >>> >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> Are you a CCNP or CCIE and looking for a job? Check out >> www.PlatinumPlacement.com >> > > > > -- > Bruno Fagioli (by Jaunty Jackalope) > Cisco Security Professional >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
